I understand what you are saying - but - if I want to install a program on my computer - I should be allowed to do so - the same with firefox — maybe it might need me doing the equivalent of sudo, entering some password - or just clicking through, “ok, yes I know, extensions can do bad things.”, “yes I really know that I shouldn’t install an extension if I don’t know exactly what it is” 10 times, but — etc…

I just don’t buy the “attack vector” argument. There are many ways to mitigate, without removing the ability.

Anyway, in a way this was a good experience - I am going to try to ditch firefox sooner than later now.