Malware in open-source web extensions

While I understand the problem, the only solution is a big red sign "Abandon all hope ye who enter" or taping it all shut. It was fun while it lasted.

I guess a big userbase will always attract people with malicious intent, abusing the tech behind everyday apps. But the original creator cannot do anything, when his or her successor does not weed out the bad. Even if they do, this cycle will never break. Interesting morale problem for open source software developers.