Not only that, but what if the browser extension changes owners? We've seen this in the past when suddenly trustworthy code turned not so trustworthy.

How do you keep track of this? Yes you can read the diffs, but not really practical.

I'll just wait until Firefox ships with a secure sandbox for extensions.