You can't trust a code that you didn't audit before. End of story.
What you are asking for is simply impossible, even without any permissions rogue extensions can still do a lot. It's what some developers spend their entire time working on.
If Google couldn't fix it with Android, which has granular permission per applications, why do you think it's going to be even remotely effective on the web browser ?
Not GP, but sometimes I want my browser to do pretty random/niche things without that compromising all of my browsing data.
Create a new profile, do the niche thing there, separately from the rest of your browsing.
How can the browser tell the difference between a random thing you want and a random thing you don't want?
The permissions mechanism.
I'm not. The only extension I trust enough to install is uBlock Origin.
Well great! You are already protected from random extensions then.
Yeah, by opting out of them altogether. I'd very much enjoy having useful extensions that are not dangerous instead.
You can't trust a code that you didn't audit before. End of story.
What you are asking for is simply impossible, even without any permissions rogue extensions can still do a lot. It's what some developers spend their entire time working on.
If Google couldn't fix it with Android, which has granular permission per applications, why do you think it's going to be even remotely effective on the web browser ?