Of course it's insecure. All browser extensions are insecure.
That's not true.
If there could be browser extensions that are secure, then there would be no market for hardware wallets.