One should be careful when downloading/installing a Chrome extension. Not every extension is to be trusted except for those being developed by prominent developers in the crypto/Blockchain space. You'd always need to check who's developing the extension to know with certainty how safe it is. The previously mentioned warnings should be taken into consideration to avoid many undesired losses. For ETH and ERC token transactions, using Metamask with the Ledger hardware wallet is a pretty safe bet. Still, you're interacting with an internet connection which brings some additional security risks. For the paranoid ones, creating a raw transaction offline on a separate device for broadcasting online at a later time, is the way to go.

I guess that most people have suffered from hacks and many undesired events on the crypto space because of their lack of knowledge. We should do everything possible to educate newcomers into properly securing their crypto against the latest threats in the Blockchain space. The responsibility lies within the individual himself instead of a third-party because of the decentralized nature of crypto. Hackers and scammers know this, leading them to devise new tactics against the average crypto user.

Nonetheless, it's recommended to only use trusted browser extensions for small amounts of crypto. For larger amounts, you're better off using a paper wallet or an official software wallet from the coin's developers. As long as you do that, you'll never end up losing your hard-earned crypto from malicious actors. Just my thoughts