Did you know you could actually read the source code of most extensions that are on the chrome webstore. I'd rather that people start publishing their privacy policy honestly else Google blocks them from the webstore.
Of course I know - at a point in time though. With Chrome autoupdate mechanism, unless permissions change, I don't have to approve. I'm sorry, but if I multiply by my hourly rate the time I need to invest to secure the benefit of using extensions, which work only on the desktop anyway, this will be a huge investment I'm not willing to do. I was thinking at some point to create a bunch of Chrome profiles and silo different web activities, but this is too much work, and to be able to sync across machines, I need separate Google accounts, i.e. too much effort still.