With appropriate permissions, extensions can request access to hardware:
Malicious websites may display pop-ups claiming a browser extension update is mandatory to view content or watch a video. How to Detect and Prevent Extension Keyloggers keylogger chrome extension work
If you're testing security for your own system or an authorized penetration test, always use controlled environments and follow local laws. With appropriate permissions