Given that it's open source, we have the freedom to audit the code to make sure it's trustworthy.

Also, Mozilla has a vetting process it puts a popular subset of extensions through.

>Due to the curated nature of Recommended extensions, each extension undergoes a thorough technical security review to ensure it adheres to Mozilla’s add-on policies.

https://support.mozilla.org/en-US/kb/recommended-extensions-...