Ask HN: Why can't Chrome block extensions by default on .gov and bank websites?

And only enable them when you click on the extension or allow it on a specific domain?

Or at least have a policy to not allow all extensions on all domains by default as user selectable option in Chrome settings?