It's possible, people recommend using those browser extensions for that reason, but then you have to trust the browser extension. I self-host a satellite.earth instance and from what I've seen it's legit.