Firefox already blocks remote code execution in extensions and nobody's complaining about that. There would be nothing controversial about Chrome doing the same thing.