Sorry if this is a dumb question, I’m not a tech/IT person and am very early in my privacy journey.
I was going to install a web clipper browser extension that works with a notes app I’m trying out, but the installation page says it isn’t actively monitored for security by the organization behind my browser. The extension requires access to your data for all websites. However, the page also says that they don’t share data with any third party and don’t have access to this data themselves. What level of privacy risk am I taking on with this extension?
It’s disappointing but some nation state sponsored attackers are either adopting useful addons or creating them from scratch. After they have a sufficient base of trusting users they update the addon to add spying code that activates for a group of accounts possibly targeted by geolocation. The vast majority of users are not even affected. So with that going on it’s hard to be certain of an addons quality.
I’d consider where the addons are hosted. Firefox and Chrome both allow reviewing existing addon permissions so disable when not required or split into risk level profiles for personal vs work vs anon browsing.
That mostly happens with ad injection and credential stealing. I’m sure the kind of attack you describe happens, but it’s not relevant for most people.