It suprises me that people have so much trust in open source binaries and web extensions.
Even if you build yourself, the dependency chains are usually enormous. Good luck knowing what you're actually running.