>A Google spokesperson has confirmed that they're looking into the matter, and pointed to Chrome's Extensions Security FAQ that does not consider access to password fields a security problem as long as the relevant permissions are properly obtained.
This definitely feels like the wrong approach. I think they should be moving towards deprecation of this permission, and replacing it with what the extension actually needs.
This definitely feels like the wrong approach. I think they should be moving towards deprecation of this permission, and replacing it with what the extension actually needs.