I am not sure how Manifest V3 is relevant here?
Because they literally tout security as one of the primary reasons for forcing it onto people.
https://developer.chrome.com/docs/extensions/mv3/intro/
The first line is “A step in the direction of security, privacy, and performance.”
https://developer.chrome.com/blog/mv2-transition/
“Manifest V3 is more secure, performant, and privacy-preserving than its predecessor.”
It’s the first thing they say.
If it doesn’t prevent a malicious extension from lifting your password in perhaps the most dumb and naive way I can think of, then it seems fairly disingenuous to describe it as “secure”.
Yeah that’s totally galling. Shrinkflation for online services.
You know some shiny-suited corporate asshole got a huge bonus for coming up with that though.