They make it pretty clear that the extensions are optional. Providing support for installing a diverse set of extensions seems fine to me - everyone has different use cases
Imagine a realm where a myriad of extensions can freely interlace, conjuring a synergy where 1+1 transcends 2 within the PostgreSQL ecosystem.
Given that all extensions are optional, bundling them all together poses no harm to the stability of the core part.
Why would they want that many available, or installed? Those are two different questions.
to increase attack surface
Wouldnt you be locking this entire infra in a local network behind a firewall?