Can extensions steal personal data immediately after installation?

Question

Google Chrome

Almost all modern extensions have rights:

Просмотр и изменение ваших данных на посещаемых сайтах

But I would like to familiarize myself with the code before using the new extension. However, you cannot just download it, you can only install it, and it is immediately active. Now, if you immediately turn it off, will it have time to pull something off?

Answer 1

drag and drop Chrome extensions are easy to download and unpack without installation.
at least until recently it was possible.

Answer 2

Nothing prevents you from going into the folder with extensions, finding the one you need and viewing its code.

Answer 3

I confirm, the extension can spoil right after installation. So, for example, comes the terrible anonymox extension - it's a proxy. After installation, it immediately reloads all tabs, so all cookies instantly fly to the uncle.