So it's a backdoor to bypass the browser sandbox. Spyware is an apt label for that.

It's not a backdoor: it's using a feature for the purpose for which it was designed. It's not granting plugins access to anything except itself

It's the AUDACITY of doing shit like that on my system without asking me. Creating a shitload of files to modify the settings of OTHER apps, wtaf?

I asked Codex to look into it, and sure enough: https://i.imgur.com/lvOjR0x.png