![](/static/66c60d9f/assets/icons/icon-96x96.png)
![](https://beehaw.org/pictrs/image/c0e83ceb-b7e5-41b4-9b76-bfd152dd8d00.png)
I am not sure how Manifest V3 is relevant here?
Because they literally tout security as one of the primary reasons for forcing it onto people.
https://developer.chrome.com/docs/extensions/mv3/intro/
The first line is “A step in the direction of security, privacy, and performance.”
https://developer.chrome.com/blog/mv2-transition/
“Manifest V3 is more secure, performant, and privacy-preserving than its predecessor.”
It’s the first thing they say.
If it doesn’t prevent a malicious extension from lifting your password in perhaps the most dumb and naive way I can think of, then it seems fairly disingenuous to describe it as “secure”.
Best of luck with that.