> Extensions used to have carte blanche to change the browser, which was a security risk …
I don't buy that. It's my browser running on my computer, it's my choice whose code I choose to run on it.
If, say, emacs or vi had this kind of handholding, neither one would be much more than a text editor.