ExtensionDownloader uses signin classes that must outlive it (SigninManager and ProfileOAuth2TokenService). As detailed in https://chromium-review.googlesource.com/c/chromium/src/+/1051810, this lifetime relationship is currently guaranteed in a quite indirect fashion. In the interest of code health, it would be good to make this more explicit and less fragile in some fashion.