Isn't that weird - not a programmer but ... surely the only code they need to run on every page load is to add an event handler for forms to check if a login form has been focused? (At which point their add-on runs). What else are they doing?