Something like Keychain support seems high-risk to leave to third party addons? In the back of my mind I wonder if they'll also follow the Chrome model of malware takeovers.