The real security for add ons would be to use external processes with OS IPC, even if it is more resource intensive.

But you'd also have to have an entire VM to run the separate process in, otherwise it still has access to the user's whole account and desktop.

(unless UWP I suppose, which even Microsoft have kind of forgotten about)