A bit confused … in this exact case, one had to go to a website download the “bad” app, installed it perhaps through a dmg (disk image) and it would act like a Chrome extension.In this exact case, it would‘ve been installed as an app, not an extension. And as many have already said, always(!) check the developer info before installing.
If I installed a Chrome extension through the Google Store (forget exact name) which I went to using a Chrome menu command, then I’m okay?