I’m no expert, but I think the main moat that Chrome has here is its web store where users find extensions and developers submit their extensions. There’s a review process which whilst far from perfect is labor intensive and still helps catch rogue extensions. Hard to open-source this part of Chrome.