Despite the non-maliciousness of the easter egg, I do think the act of just installing an extension into a browser could be viewed as a trust-breaker. I think the other "controversies" are overblown, but them remotely installing an extension like that doesn't sit right with me.