One part of the problem is that most of the extensions are updated silently in the background. Some extensions fire up a new tab with a page displaying new features and such, but this is not a requirement in any way.

Even worse, they only update if they don't need any additional permissions. Thus incentivizing developers to ask for more permissions up front.

That's exactly what I wonder about Adobe Acrobat so often.