content: Personally, I'd say it's better to have things as extensions where feasible. This way those who are familiar with the feature can focus on making it better/more secure on a cycle that works for that team, rather than being constrained by the browser's release cycle and need to orient oneself within such a massive codebase.