Privacy browser extensions misled users and sold 8 million AI chat logs, exposing sensitive conversations for profit without consent.