extension security risks