Extensions often change permissions silently after installation, increasing long-term security risks without user awareness.