Not sure about the legality, but it's certainly unethical and I suspect most would consider the addon malware. It's on about the same level as 'phishing'.