Researchers showed one browser extension could hijack AI features in five Chromium products; some demos could access files, sensors, and browser data.