PostgresSQL -- ALTER ... DEPENDS ON EXTENSION is missing authorization checks

The PostgreSQL project reports:

    Versions Affected: 9.6 - 12
  

    The ALTER ... DEPENDS ON EXTENSION sub-commands do not perform
    authorization checks, which can allow an unprivileged user to drop
    any function, procedure, materialized view, index, or trigger under
    certain conditions. This attack is possible if an administrator has
    installed an extension and an unprivileged user can CREATE, or an
    extension owner either executes DROP EXTENSION predictably or can be
    convinced to execute DROP EXTENSION.