How modern browser extensions quietly hijack your security, what attackers do with them, and how I lock my own browsers down before they betray me.