The Rest of the Iceberg: What We Miss About Browser Extensions Attack Surface