Most extensions are written in to allow dynamic loading without app updates. The execution environment is heavily sandboxed: