Re:Firefox 57 as the first release where only WebExtensions ...
by yuhong on Tuesday February 21, 2017 @01:59AM
(#13693824)
I think the difference is that they want to try to prevent installers from installing unapproved extensions, which even many of the software that looks more legitimate often does. See https://developer.mozilla.org/en-US/Add-ons/AMO/Policy/Revie...
The set of clueless users who would install arbitrary malicious extensions and the set of clueless users who would download and run arbitrary executables is basically the same. Yet if they do the latter, any extention sandboxing is completely and utterly moot. It's the same issue as with mandatory extension signing; requiring signing for extensions while nothing stops someone from downloading an unsigned .exe (which could memory-patch Firefox if it so wished) is absurd.