I think we can make assumptions for all of these. Raycast extensions aren't compiled code, and run within the Raycast runtime/engine. I'd bet that this is exactly the same.

In many ways that's the same as Chrome apps, they have no code, they're just the Chrome binary, so there aren't any code signing issues.