I am not sure where the best place is to post this. But it would be really great if a change could be made such that extensions would not be able to change focus away from a password field or at least not be able to change focus when the user hasn't specifically requested an action.
Often I find that a password field will be shown on page and the end user starts to type their password into the field only to have a password manager or other extension load that then takes that focus away from the password field. This results in the end user not typing their complete password into the field or worse accidentally typing it in plain visible text into another field on screen. It would be best if once you were clicked into a password field only another click outside of that touchpoint could divert keyboard input elsewhere.