I think one of the thing that may improve the user experience is allowing easier login. I agree that login with extension is more secure and better but it's a bit of a burden for the average person to install the required tools.
I suggest allowing login with easier method while displaying a clear warning and possibly putting limits on their account if they use less secure method.