Is it possible to say, for a specific extension, give it only the following data access privs, not unbridled access?
Then we could give extensions just what they really need not more.
Best wishes
Mouse
(PS maybe some CIS functionality could be leveraged here. The browser, in a sense, is the new OS)