Or they can just cripple the APIs so extensions don’t work as effectively anymore. Kind of what happened in practice with Safari (although this was not malicious).