Hacker News Reader

A good sandbox with suitable access control would help too.

Extensions have sandboxing and permissions but to be able to do anything moderately useful you need access to literally everything.

For something as basic as an ad blocker or a theme loader you need full access to every page.

That's ok, as long as you don't phone home.

Well, this is not really true as the extension can still do a lot of damage in e.g. online banking.