> Hm, if web extensions become a standard, are they really even extensions? Isn't that just new web APIs with tweaked security parameters?

The main difference is that the user installs an extension, which possibly modifies the behavior of the browser for all websites. A traditional web API only takes effect if the page that the user visits makes use of that API.