Comment by charcircuit

>but with manifest v3: Google are now in charge and have to approve all "definition" updates

No, they don't. MV3 extensions are allowed to fetch remote data which definition updates would be.