Some people may think what you're saying is outlandish, but it's worth remembering that this is pretty much what already happened to Ublock (which led to the forking of Ublock Origin and return of gorehill)

The "original" Chrome is basically the mother of all supply chain vulnerabilities and whenever the inevitable exploitation happens, everyone who thought they were a connoisseur of security is going to get completely pwned.

But I suppose in your clown world security model the big US corporations who have proven again and again that they will act against your best interests are the only ones to be trusted while individuals with a proven track record must be sandboxed at all costs.