There is currently a patch applied, disable/extension-updater.patch, to address some of the concern about unrequested network connections.
The right approach here is to create debian packages for extensions (for example chromium-lwn4chrome), rather than fetching them from third party sites. Best wishes, Mike
