Which one is better privacy and security wise ? assuming they do the same function
Ideally, none of the above. What are you trying to do? It can probably be done in a way without extensions or user scripts.
1 Like
what these userscripts do
without keeping a cookie
I would consider how critical these userscripts would be for you. If you find that you absolutely cannot live without them, then use them.
However, keep in mind that the best option for your privacy and security is to reduce the amount of extensions/userscripts in your browser to an absolute minimum.
To answer your original question:
I would say a Manifest V3 extension from a reputable developer would be much safer than a userscript. The fact that extensions are signed and distributed on a store is a plus over userscripts as well.
2 Likes
You can limit at which domain the userscripts can access, and unset auto-update in the userscript’s extension. It won’t be different to MV3 extensions in any ways. There are dozens of signed and distributed malicious MV3 extensions exposed in media recently, and likely hundreds and thousands of them un-discovered. Signed and distributed doesn’t mean anything. Also more likely it’s easier to read and understand the userscript codes than MV3 extensions.
Both the userscripts above are written clean and clear btw.
1 Like