It has been a while but I believe they are installed into your home directory and would have their ownership tied to the user that installed them.
I don’t believe that they are.
If you have doubts, review the files yourself and install them manually. Ultimately, when installing anything from any source you only have two options. You can trust the person who publishes it or you can verify it yourself.
Is GNOME extension more secure than the KDEs.
As far as I know anyone can upload a theme in KDE, but in GNOME it is verified by them (that’s what is mentioned).
So, as it is verified, it will more secure/safer than the KDE theme right ?
That’s what I’m comparing.
Yes, themes and extensions are different but like GNOME extensions are reviewed but the KDE themes are not. Other things like icons etc are not a big thing.
So, as the extensions are reviewed it must be pretty safe right ? The question might be silly but I want to know as the extensions will be a part of the OS itself.
What’s your opinion ?
I don’t think themes need much permission. It’s similar to changing CSS in a website. All it does is downloads a compressed file with all theme information and styling and extract the contents to the themes folder.
or ~/. local/share/plasma/desktoptheme/
for user installed themes.
So for safety, it’s safe since there is no script or anything that is being run when installing a theme through theme store. The only issue is themes may or may not play nice with your applications. Sometimes they may try to render white fronts on white background and other issues but it’s nothing serious.
If you’re planning to install from GitHub repositories, may want to check the contents if it has some install.sh scripts.
For GNOME Shell Extensions, It’s hard to say. Extensions can break, crash, and are generally unpredictable depending on what extensions it is. It is often tested by it’s maintainer but nothing can be said. Better to check the code yourself for security, try it if it supports the GNOME version you have for stability. If something breaks the GUI, use gnome-extensions in terminal to manage it.