Personally, at my company we just use a private link redirecter at go.company-name.example. We use a modified version of the open source Zerodrop webapp[1].
This solution doesn't require a browser extension with elevated permissions that increases your attack surface.