so if i install a recommended mozilla add-on like ublock origin that has an extreme permission like "access your data for all websites" does that mean that every update to the add-on sees rigorous security review by mozilla before it is pushed?

if not, is there some mechanism in place that can reduce worries around software supply chain attacks on a privileged piece of software like this?