Some extensions don't do any work locally and simply pass off the work to an external server to do which of course means you cannot see the code or what happens to your data there. However for simpler extensions, you can see the code and vet it yourself before installing (assuming a decent knowledge of JavaScript of course).