1. A computer-implemented method for implementing default security features for applications, comprising: receiving a request to include a web application or a browser extension in a digital marketplace; determining if the web application or the browser extension conforms to default security features; allowing a developer to override one of the default security features if the developer declares the override in the request; labeling the override with a risk level; storing the override and the label in a database of a server; and including the web application or the browser extension in the digital marketplace if the web application or the browser extension conforms to the default security features.