Extensions load unknown sites into invisible Windows. What could go wrong?