It is not. The Mr. Robot controversy showed that they can remotely install addons, and the Booking controversy showed that they can remotely alter the contents of the "new tab" page.