That link doesn't seem to address why plugins need to be restricted to a whitelist? (Which might not be the end-goal, but Mozilla is quite cagey about it)