Extensions are a much greater security risk than ads.