Verification of the checksums on the binaries.

Not sure how you do that for the browser extensions though. You're trusting the browser app store to verify in that case.