If you don't use a master password, it's unsafe. And even with master password, I vaguely remember it's not that safe either, but that might be outdated info.

This was going around the last days: https://github.com/Sohimaster/Firefox-Passwords-Decryptor