It's just an attack vector I wish didn't exist at all. There's also metadata. Sure Mozilla doesn't have your passwords, but they know who you have passwords with. That creeps me out.

There's nothing wrong with the all-purpose heavily featured approach of stuff like Chrome and Firefox, and I get that other people like Sync, I just really wish there was a totally stripped down basic internet browser I could trust.

>Sure Mozilla doesn't have your passwords, but they know who you have passwords with.

Do they? I just skimmed the source and could not find anything that hints at that (and implementing it the way you said it is makes for much more complex code..)

I just don't enable it. It's not on by default.

For the average user—think your uncle who's about to ask you tech support questions this weekend—using Firefox Sync is way better for their privacy and security than reusing the same password everywhere. And for those of us who have and use password managers, Firefox Sync is not on by default—unlike Brave's attention-tracking or Chrome's Google logins.

Isn't profile sync opt-in?