You actually think he put an IP logger in an extension that was just JavaScript event hooks? It didn't send any data. The only sketch part was downloading from his GitHub new updates, which could contain bad code, but that is just general bad practice that everyone does for sale of convenience...