Irrelevant.
> (b) Chrome's extension model dramatically improved on the previous state of the art which was Firefox's "every extension can do everything, extensions can't be uninstalled completely, and there's no review"
Irrelevant.
> (c) the install dialog is just one part in a bigger system which includes the review process.
"Our MFA system is broken and will accept wrong input, but that doesn't matter because you without the correct password you won't get in."
Would that fly?
> I also encourage readers to remember that generally speaking, you all _want_ extensions. When Chrome didn't have them, they were the top feature request in the bug tracker.
What are you trying to say? That because users want it then overlooking security issues is excusable?
> If you don't solve user needs, users solve them themselves with solutions that are even worse (ie native code).
That falls under the realm of 'their fault.' This problem does not.
> Please spare a bit of empathy for the "chain of humans" that have had it.
OK, I feel bad for the poor Google worker with the thankless job and a six figure salary. Now fix it.
