On: Let's build a Chrome extension that steals as much...

[nine_k]

But the idea of the app isolation is just that — apps should not be able to touch each other.

There are of course escape hatches, because sometimes you want apps to interact.

[dcow → nine_k]

Extensions cannot touch each other. They also can't touch other websites without an escape hatch, because sometimes you want your password manager to modify the DOM and fill in your password for you.

[dimensi0nal → dcow]

extensions have to touch other websites to be useful

[dcow → dimensi0nal]

Not all of them. Momentum is one of my favorites and it just gives me a new start page.