Came here to say exactly that. No reputation could be stirling enough and no security practices tight enough to convince me that ANY entity should be receiving EVERY SINGLE KEY STROKE that I make in my browser.

I would not send all that data to the Red Cross, much less a fucking fly-by-night browser extension company that has no choice but to monetize it.