In the end comes down to whether you trust the developer, not the current code, as an "evil" update could come down the line. Heck the developer could even sell the extension and let someone else be evil...

Come to Firefox, we have actual human beings that look at the source code of new or updated extensions and a strict no telemetry policy (unless the user opts in).