This kind of effort super justifies the sandboxed/Deno view of the world. It's such a high courtesy that so many extensions can be configured at all. Rather than learning each extensions config options, the ideal world feels much more general, where we have generic trust based systems where we can control & monitor trust within the system, in a general way. "Who can this plugin talk to" ought have general controls.
Of course a lot of extensions might just break. But probably a bunch would promptly get forked at that point.