Not all of them. While rare, malicious extensions can slip through Google’s approval system and infect users’ devices. Ensure you’re using trusted links directly from a VPN’s website. Don’t trust unlisted, private extensions, as they haven’t been verified by Google. Otherwise, the plug-ins in this roundup all come from reputable VPNs that have undergone our rigorous testing process. 

By default, a Chrome extension doesn’t keep any additional data compared with using a standalone application. However, it does add another layer of risk by trusting a third-party servicer. You take on a similar amount of risk when using the Google Play Store or the App Store. In the unlikely event that a security vulnerability is found on the platform, it could provide malicious actors with pathways to exploit plug-ins and apps. When malicious apps slip through, they can end up on thousands of computers.