If I want privacy from an extension, I don't install it. I can't do that realistically with a website as I need to visit it to determine whether it violates my privacy.

Running an extension is running code I trust (mostly). Visiting a website is running code I (inherently) don't trust. Many websites even have no idea which code they run on my machine (advertizing networks).