To me, this seems like a security flaw in Chromium. Websites should not be able to access any of it (yes, even just the extensions) regardless of what code they're running. Not great for LinkedIn, but a critical failure of Chromium.