The web extension honor system "security" model is broken because that extension that prints Hello at the top of the page might later be modified by a malicious actor to do something else [1].

[1] https://www.reviewgeek.com/45420/over-70-chrome-browser-exte...