> If a malicious installer sneaks in toolbars it can also install a keylogger/send all of your data to a server/install a firefox fork with the toolbar preinstalled/etc.

If it's totally rogue malware, sure.

The toolbars, on the other hand, were coming from companies like Oracle that operated entirely within the bounds of the law.