Not sure, but Mozilla had taken another PR risk by sponsored contents to the Packet integration [1]. So we need to keep our eyes to Mozilla.

On wrecking Normandy, you can actually see all enabled recipes [2] and nothing seems smoky. It even seems that the hotfix (id=721) was used to unbreak Office 365, supporting the positive uses of this system. But I strongly agree that there should be more approachable list of them.

[1] https://blog.mozilla.org/futurereleases/2018/01/24/update-on... (HN discussion: https://news.ycombinator.com/item?id=16229927)

[2] https://normandy.cdn.mozilla.net/api/v1/recipe/