> The security win can't be understated: with its permission-less design (enabled by MV3) I am down to zero third-party developers that can get compromised and silently push an update that compromises all my web sessions.
Can you or someone else elaborate way it would be more secure? I dont quite follow or see the benefit.