Hacker News Reader

Yes, the other possibility is copy the extension code locally to block updates, then you don't trust the future exploits

Also, for most mentioned extensions functionality isn't available in browsers

But then you’ll no longer receive any future security fixes by the publisher.

It’s a hard problem to fix, when we can’t trust any publishers in the future :(