To be fair it's no different than entering your master password into keychain.
We 'trust' that the version we get from the extension store is infact what is available open source, the biggest difference is that keychain offers opensource version so you can compile it yourself.