I only use extensions which have the ability to be limited by the browser to certain sites. Then any potential damage is limited.

E.g. I use an ad-blocker to insert JavaScript only on one site: YouTube.com. But I use an anonymous dummy Google account for YouTube. So if anything gets compromised, I don't really care.