What penalty? What illegal thing are they even doing? If the browsers allow this, they should expect it to happen. Prevent it, or expect it. Websites shouldn't be able to "scan" for these extensions in the first place. At *best*, they might get a slap on the wrist fine they pay to the FTC or FCC, and admit no fault.