The extension support is because Google relies on an extension to do a lot of their zero trust stuff https://cloud.google.com/beyondcorp though I don't think they use proxies anymore.