Any good, benign extension can be taken over and weaponized with malware.

This mans security onion has one layer.

Even if you don't install crap, the latest strategy is attacking the developer of one of the extensions or their build process so you can push a malware update to an otherwise legitimate extension.

thanks for the sage advice. Next time you are infected with the flu you should just don't breath maybe.