Sort:  

As explained, theoretically any extension could still your password. And it's right to have trust issues 😼

Btw, I suggest you to always login with your posting key and use the active and owner keys only when really necessary

Ok thank you