Search-hijacking extensions need more than a permissions check
Socket traces search redirects across 319 extensions and a decade of reported installs. A small manifest can send queries through an operator's server without asking for broad site access.