True, but that is also true of the browser extension. You would have to trust the server that you download the extension from.

I wouldn’t install a browser extension over an app. And I probably wouldn’t install a browser extension for a web app.

I’ve read the thread. Your argument for an extension is to make it open source, why couldn’t your front end code be open source instead?