There really need to be some extension store changes. The stores as they exist are not sustainable. Just spitballing:
- No binary or closed source releases, Google/Mozilla compile from a public source.
- More zealous restrictions (which admitedly Google is already heading towards)
- Big fat warnings when accessing cookies or secure fields like passwords or CC. If this makes password managers look scary, good, they should look scary.