quick note...it appears to me that the biggest danger comes from using a browser extension at all, because it could be updated at any moment to include new code. Downloading the source code and running the extension yourself in dev mode only takes a few minutes more, and it won't auto-update...so if somebody compromised my chrome dev keys or the 'steemit more info' dev keys, they could push nasty updates out automatically.

If you install the source via dev mode, that avenue is no longer possible.