This incident did not, as far as I can tell, harm anyone's security or privacy. This add-on doesn't appear to track you, send your information to anyone, or grant access to your system to anyone else. People are upset to find the add-on on their systems, but what it actually does is not incompatible with the above paragraph.