It's ironic that probably the biggest victims were youtubers and other "influencers" who mindlessly promoted this extension to their viewers, for money of course.
Genuine question I was wondering when this went down - wasn’t this completely unknown at the time? If that’s the case, I feel like I can’t blame those who promoted it. I don’t have all the info though.
I think I remember seeing a blogpost about Honey extension being a very bad idea from security perspective way before the public outcry and it might had mentioned the attribution(right term?) too.