Browser extensions turn nearly 1 million browsers into website-scraping bots Extensions load unknown sites into invisible Windows. What could go wrong?