I posted an idea about sandboxing that I think is a middle ground between doing away entirely with the idea of gnome/kde extensions and themes using sandboxing:

https://discuss.kde.org/t/sandbox-plasmoids-by-default-to-pr...