This is why browser extension permissions are so important. Users see "VPN" and think privacy, but this extension was doing the exact opposite. 100k installs means this was happening at scale for months or years. Browser stores need better security screening for extensions, especially ones that claim to protect privacy. Always read extension permissions carefully. If a VPN needs access to all your browsing data, that's a red flag.