I submitted something very similar to YC last year with the same implementation. Works in practice but it's insecure.

The solution I'm going with now is a native client that creates the cookies locally which the browser extension then accesses. Mine's also not immediately marketed towards teams but rather individuals.

Best of luck.