The biggest surprise to me is that this has so many up votes on HN.

Getting "hacked" by a sleazy browser extension is about as surprising as getting a virus after installing something from a warez site.