[Boulth]

I haven't seen any mentions or this extension that allows verifying pages before they are rendered: https://github.com/tasn/webext-signed-pages

Another thing is non exportable WebCrypto keys that can limit the damage even if the page is compromised.