Also, how do you know that those super useful Chrome extensions aren't selling your customers'/employers' data to the Chinese?

I would always suggest reading through the source code of any extension that has full access to read NetSuite using something like https://chrome.google.com/webstore/detail/chrome-extension-source-v/jifpbeccnghkjeaalbbjmodiffmgedin?hl=en.