For Google, it's not enough to warn you when an extension attempts to install from outside the Chrome Web Store. Starting in January, Windows users will be able to install extensions only from the official store, as Google blocks all other extension sources.
Erik Kay, Chrome's engineering director, wrote in a blog post that the current security mechanism isn't enough. It asks users if they want to install the extension when it comes from outside the Chrome Web Store, but "bad actors" have figured out how to bypass it.
The malicious extensions that get installed … Read more