dan , 11 months ago

I am not sure how Manifest V3 is relevant here?

Because they literally tout security as one of the primary reasons for forcing it onto people.

developer.chrome.com/docs/extensions/mv3/intro/

The first line is “A step in the direction of security, privacy, and performance.”

developer.chrome.com/blog/mv2-transition/

“Manifest V3 is more secure, performant, and privacy-preserving than its predecessor.”

It’s the first thing they say.

If it doesn’t prevent a malicious extension from lifting your password in perhaps the most dumb and naive way I can think of, then it seems fairly disingenuous to describe it as “secure”.