I'm at the point where I only install extensions from source (via the dev settings) due to rampant abuse of the extension marketplace to track users, exfiltrate data, inject ads, participate in proxy networks, and so on.

Even non-malicious extensions are at risk of being sold and then auto-updating to inject malware. No offense, and I love the idea and the look of tabsampler, but the entire extension eco-system is just rife with this kind of stuff.