CWS doesn't review every extension submission, at best they do some % of them along with anything that sets off red flags. Out of hundreds of times I pushed updates to my extension (~100k monthly users by the end) it was delayed for human review maybe... twice?
maybe its time for a LLM based security review open source framework. this could be adapted for extensions to see what information they'd be sending over.
