I remember someone lost few million $ worth of bitcoin via the wallet extension in the browser
Yes because they authorized a website to send all of their funds