The likelihood of malicious code making its way into a browser extension in production is way, WAY higher than it is for something like Chrome or Windows.