Earlier quoted context omitted.
Also: https://www.pehub.com/2015/05/avast-leads-22-mln-round-for-j... "Jumpshot also captures https clickstream data to reveal in-depth buying and social behavior above and beyond simple browsing." Capturing https clickstream data is only possible when you MITM the user - see Avast.
They could make a deal with browser extension developers to bundle a surveillance module. That is why I never install any browser extensions.
https://www.reddit.com/r/IAmA/comments/1vjj51/i_am_one_of_th...
At least, not all extension developers gave in to $$$.