How do we know which plugins are secure? If I wanted access to people's browsing info, a plugin would be the way to get it...

Tab cookies if you're on Chrome is a good alternative.