what most people do is wrong in most cases. elaboration goes nowhere and in general just derails the topic more.
an extension has access to eveything you visit. it tracks you and sells/shares your data. not to mention potential bad code injection.
do you have example of such devices?