Kinda, but if something can be built as an extension, it probably should be. It proves what you can do with the APIs, proves it can be replaced / forked by other people, and ensures a consistent level of isolation by default.

And if it can't... often it's worth asking if it should be possible.