I remember a post a few months ago, on a similar topic of companies wanting their SDKs (really user tracking code so they could resell that data) included in extensions. So this is definitely a widespread experience.

As an aside: The justified text here looks awful on mobile (and I checked Chrome, same result): https://i.imgur.com/AZl06K9.png