Using an adblocker based on Manifest v3 would avoid this, as those blockers can't phone home to update their malware datasets. ;)

Username checks out.

I stopped using adblockers generally when I considered both 1) we get very little visibility on when an extension changes-hands/updates, combined with 2) you have to give it access to all your browsing data.

People sell popular browser extensions to malicious parties all the time and AFAIK there's no systematic way to notify users when this happens.

Technically, noscript is a better solution. (I still use uMatrix sometimes)

Huh, I always get down voted for saying something very similar.

It's a rational assumption and should be taken in to consideration to the extent any particular threat-model should or shouldn't.

New! ANØM 2.0!