I have 2 users in Chrome. One is used for personal purposes has gmail box, google disk, etc. The second one is "business" user who has another configuration, it's own gmail, google disk, etc.
Let's imagine that for business user I install some extension with read permission all data from all sites. One day this extension is bought by some bad person and it starts for send all my data I entered to all pages.
As far as I understand, correct me if I'm wrong, this extension can steal and send my passwords that I enter at any page for this business user. But if this one is installed can it still also a data from my personal user?
If there is a malicious extension for one user in Chrome, can it steal data for other users in the same chrome even if they did not install it?