They already were using some sandboxing measures to control this. But Flash inherently involved native, proprietary code and it was difficult to secure completely, whereas modern WebExtensions are JS that is completely under the browser's security control.