I wrote a piece on that topic too (2019): https://blog.mironov.live/browser-extensions-could-be-spying...