Web extensions are vulnerable, have privacy loopholes and frequent hacks. Would you save your bitcoin private 🔑 on a browser?

They aren’t audited well.

The best way as of right now to generate your 🔑 on offline device(for example seedsigner) and then allow client to sign events. Hope there will be more ideas how to properly manage 🔑 but definitely not a web extensions