My personal policy is that if an extension doesn't have a very limited scope (for example adblockers that need full access to everything), it has to be open source and I'll install it from source to control when extensions are updated.
lots of web properties now serve ads from origin, blockindg dns might not help with that?