And also keep a separate browser profile without ANY extensions for doing your banking and other financial work.

This extension disables any updated extension that requires new permissions, among other niceties: https://chrome.google.com/webstore/detail/extensions-update-...

(I'm only a user)

I thought chrome did this automatically now.

Or don't. because it depends on openstyles.org which is also owned by SimilarWeb.

Firefox lets you know when addon changes permission between versions. You are prompted to accept the new permissions before upgrading the addon. This has been helpful in weeding out addons that become too data hungry.

Sometimes extensions plan such things a long time ahead - for example this extension https://chrome.google.com/webstore/detail/bitcoin-litecoin-e... injects itself currently into all websites, and sends the url back to its own background page.

So once they are ready to add malicious code in the future to pass that information somewhere else, no permission changes will be required.

Before downloading any extensions, I usually inspect them quickly with https://chrome.google.com/webstore/detail/chrome-extension-s...

Most important parts are "manifest.json" and then if defined then content scripts that match catch all urls and "https://*/*" / "http://*/*.

Thank you for the information. Very helpful.

Yep switched a few months back last I heard about Stylish being bad, and never looked back. It works very similarly and you can import/export all your stuff so it's super easy to switch.

They do have to make you agree to the new TOS, so just make sure to at least skim any plugin popups/pages that come up after an extension update.

Before uninstalling stylish, consider visiting its webstore page and rating it 1-star so that upcoming users know it's not a great extension.

You can report abuse without installing, so that's an option too.