Eh, Google controls the add-ons marketplace though. They control what add-ons are allowed, and they could even audit the add-ons for malicious code/behavior. Google, being a company that collects 75% of its revenue from ads, is being disingenuous by claiming this is a security-centered position. If security were the priority then the add-ons themselves should be inspected thoroughly, that much is obvious.