How can an extension change hands with no oversight?

Google delisted the image conversion tool earlier this month, but not before it had likely been modifying thousands of users' ...