Google Chrome now warns about risky password-protected archives

Google Chrome's hidden extension allows *.google.com to access private APIs

Google Chrome ships a default, hidden extension that allows code on *.google.com access to private APIs, including your current CPU usage

Google Chrome has an API accesible only from *.google.com