If your first line is also about the Mr. Robot thing: it was opt-in. Yes, the code was there, and it was listed as an extension (which reasonably caused people to think they caught a virus or something), but no code was actually being executed. You had to explicitly enable that yourself in about:config. (And because that is often not mentioned, it's portrayed as a privacy issue, which is a shame because it's inaccurate and damages trust more than it should.)