NPAPI plugins, ActiveX controls, etc. are just native libraries that are loaded into the browser's process. So, they can do anything that any other native application can do.