Browser plugins generally have privileged access to data exchanges between user and remote server. So, they could potentially spy on you and scrape your secrets.