Re: Who are we kidded by?
Exactly, what constitutes abuse in this space?
Google provides API
Someone creates plugin
User must install plugin
User users plugin to customize browser....
Where is the abuse?
This isn't something unscrupulous third-party actors can push out (this isn't a vulnerability with websites). Sure, you need to trust the plugin creator, but Google assumes some of that responsibility by being the only host for "trusted plugins" (thanks Google!, keep uninstalling my work's remoting plugin EVERY DAMN TIME I relaunch you).
The abuse referred to is, as mentioned, the abuse against Google by users.