The amazing thing here is: A few of my non-programmer friends told me that they would NEVER install a Chrome extension that can access all their data.

At the same time, all of them have no issue at all to install a regular Windows application from, say, Download.com. They are surprised when I tell them that any Windows application can not only access all their data but could also format their hard drive...

To cut a long story short: Google does a good job of educating users. Microsoft should follow (and innovate with a more fine grained security system).