In Part 1, we mapped the Extension Jungle — the sprawl of privileged browser add-ons that your firewall and EDR were never built to see. Extensions are a symptom. The deeper question is why the security stack has this blind spot at all, and what it would mean to actually close it.