Removing extensions used by 55 million users is weighed against the loss of functionality provided by those extensions. Maybe Google just doesn’t want to piss off 55 million users (actually a lot more since, as you say, your list of compromised extensions is not complete)