Those are concerns for consumer software (like phone apps), but I'm not sure if these add-ons even work with regular GMail?

They seem to be part of "GSuite Marketplace," which is what businesses use, so presumably the domain admin would also have control over which apps can be installed.