I did a google search to respond to your comment because I was pretty sure that the threat was not a mere hypothetical.

https://www.kaspersky.com/blog/dangerous-chrome-extensions-8...

https://palant.info/2023/05/16/malicious-code-in-pdf-toolbox...

https://palant.info/2023/05/31/more-malicious-extensions-in-...