It's ironic that probably the biggest victims were youtubers and other "influencers" who mindlessly promoted this extension to their viewers, for money of course.
replies(2):
I think I remember seeing a blogpost about Honey extension being a very bad idea from security perspective way before the public outcry and it might had mentioned the attribution(right term?) too.