Extensions set up on practically 1 million gadgets have actually been bypassing crucial security defenses to turn web browsers into engines that scrape sites on behalf of a paid service,…