But then again why not just treat these sideloaded extensions as first-class citizen, add support for their removal, and add confirmation before enabling them the first time?