This is quite the problem with the chrome extension ecosystem. It is rife with malware. How does someone build an extension that can promise better behaviour. There doesn’t seem to be a way to restrict oneself.

Even manifest changes aren’t “scary enough”.