Extensions in web browsers are not fully safe, has been many articles on this in the past. And like I said they skipped such a basic step of security. An SSL certificate. Which you can easily with a basic understanding of web security