If you cannot trust OSX, there is no reason to trust a browser extension as it can be compromised... so why not stay at the lowest possible level.