Correct, that's why I said "manually". I'm assuming these plug-ins are not already available in the Chrome store. I'm saying that in addition to that, Google should implement some sort of blacklisting, so that it doesn't get installed manually either.