Browser extensions spy on you, even if its developers don’t