I use banking and other sensitive sites in a separate browser profile with no extensions installed. On Mac, that would be something like "open -a "Google Chrome" --args --profile-directory=secure" and on Linux "google-chrome --profile-directory=secure".

For the rest of the web in my Default browser profile, I do have ad-blocker extensions installed (uBlock Origin, some Violentmonkey scripts), but they're not linked to the Chrome store. I prefer loading them as unpacked extensions and updating them once in a while manually. Mainly in case some malicious actor takes control of these extensions pushes an update that does something wild.