Maybe some of these "users" don't correspond to a human installing the extension in their browser, but are part of an attempt to collect crypto tokens by creating accounts en masse.