Yeah... so I absolutely agree that browser extensions are a fairly large security risk, and that many of them monetize through unethical means.

That said - The title as written is just complete bullshit.

If the developers are taking monetization offers and injecting code in response - the developers are fucking spying on you. There's not some malicious way to monetize an upstanding developer's extension.

Really - the title is bad enough I'd consider pulling this... It's just lying to get clicks.