Make sure you only enable browser extensions you fully trust.
At least 81k users private messages were stolen using a malicious plugin, and then sold for 10¢ a piece.
https://gizmodo.com/a-browser-extension-apparently-stole-the-private-facebo-1830175571