Sure, so long as a) the extension uses a sandboxed one, and b) you can assume your browser and c) extension implementation don't leak iframe information.

It just seems like an unnecessary and avoidable risk.

It's a cross-domain iframe, so there is no access to it by the page.

Security is subject to browser exploits, that's true, but that has nothing to do with what you were saying above.