> Ability to deploy bugs is an antipattern
Disagree then. One doesn't come without the other.
> even background scripts which don't have access to the DOM can communicate with the content script through sendMessage
If by "content script" you mean the web page script, then this is true, but in that case the web page is collaborating with the extension. Whatever the web page is sending to the extension it could just as easily send anywhere on the internet.
>