> The problem these days is established extensions that get legitimately sold or their access data hacked, and malware rolled out to the users. Published exte

> The problem these days is established extensions that get legitimately sold or their access data hacked, and malware rolled out to the users. Published extensions on addons.mozilla.org (i.e. the built-in extension distribution channel) already go through a review for every update. Someone from Mozilla _already_ has to take a look. Of course, the addon review queue is currently ~ 10 weeks (according to their blog, from Aug 12). Relative to the 6 week Firefox release cycle, it's like saying if Apple enforced application signing for OSX where you need to submit your app, wait a year and a half, then get a signed version back.