I understand that this isn't a backdoor, it's a frontdoor insofar as there is a wiki page about it. What concerns me is that Normandy isn't communicated in the UI of the browser settings, and that Firefox is allowing Mozilla to target me based on any of these:

  Targeting can be based on many criteria, including:
  Firefox version
  channel (release, beta, nightly)
  a percentage of users
  country
  Firefox locale
  installed add-ons
  profile age
  any preference value
  many keys in Telemetry

Any preference value? Is this targeting being done locally or remotely? Once I've been 'targeted' what information about me is then sent to Mozilla?

I'm not sure I want any of those shared, especially the last several. Yet this was enabled by default and the only way to disable Normandy is through about:config? Does disabling that also stop whatever allowed the targeting in the first place?

It just seems like there was a real lack of informed consent regarding this feature and it only came to light when the team used this as a shortcut for fixing the add-on disaster.