Make Extensions specify what permissions it requires, and don't let them do anything else.
Something a lot of people don't realise about VS Extensions is they run under full permission.
This means they can read your documents, delete them, or even upload them to another website without you knowing.
Like apps in Phones, Extensions should run with as few permissions as possible. What permissions they have should be very transparent, and developers should be strongly encouraged to limit their extensions.