I understand your concern, but chrome extensions for gmail are widely used even across business/enterprise.

If it's any consolidation, I do not store/scan/save any data. It just blocks images that people are using to invade your privacy (ie track your email opens).

p.s. There is no oauth access required for this extension/app.