That's why I don't use any such tools and I'm extremely careful when I approved the few extensions from verified sources I use in the browser. But I am fully aware of the supply chain attacks so Grammarly, for example, and 1Password could also potentially inject malware.