EDIT: browser makers are understandably cautious about it, even with a closed ecosystem it's already hard enough for them to avoid half their users getting pushed into installing dubious/malware addons within three hours of browsing, and their resources are limited. So, they default to closed-ness "for the masses", but there's a knob. I don't find this unreasonable.
