Hacker News Reader

Except it's open source and anyone can audit the code any time.

If the developer's extension store account were compromised or sold, they'd push an update to you that stole your data before you could react.

You don't have to auto-update extensions.