[Chris2048]

Why not do the opposite - a whitelist of extensions that don't appear malicious.

[burnt-resistor]

You've just reinvented curation, but giving Google a pass for not them doing it themselves and shifting the work onto others.

Multiple regulators should sue Google for putting users at risk by failing to protect users from malicious code before publishing Chrome extensions and Android apps.

[Chris2048]

A blacklist is also curation isn't it? Suing google is also 'work'.