They can monitor, that's fine, and the correct/ethical thing would be to inform the employees about it and show them a little thing in Chrome to indicate they're being monitored.

Informed consent, in other words.

pdkl95 also makes excellent point about the current default behavior being the problem: https://news.ycombinator.com/item?id=10630375