Glad to see more researchers
The plugin is / was bad news. Until it's cleaned up goal is to get Google to pull it. They've been front page pushing / distributing such for eons. They have responsibility to world to stop facilitating such crap and put some boots down on people that need it.
This opened up Pandora's Box. I am likely to start ripping through masses of Google Chrome Extensions at some point. Find it all unbelievable that no granular protections adequately in place / enforcement / auditing lacking. Chrome claims to be all secure and warm milk and cookies. With stuff like this, nothing could be further from the truth.
