Browser extensions play a vital role in the Web ecosystem: they enable users to customize their experience while browsing. However, the higher privileges of extensions compared to the Web applications require in-depth security considerations to not threaten the security and privacy of their users; the security and privacy mindset of developers has not been studied yet, though. In this paper, we close this research gap.