Good question, Amazon apparently is also curious:

Amazon suspiciously says browser extension Honey is a security risk, now that PayPal owns it

https://www.theverge.com/2020/1/9/21059083/amazon-honey-brow...