> when it has root access on the device. But that's a big if. Extensions can be installed without root access, and can wreck a lot of havoc. I'd also dare to s

> when it has root access on the device. But that's a big if. Extensions can be installed without root access, and can wreck a lot of havoc. I'd also dare to state the the organisation with the best insight into the extent of security benefits is the organisation that has data on the number and nature of exploits, i.e. Mozilla. > we must be given ways to override defaults, guarded by administrative access and appropiate warnings, and be able to install local extensions Guarded by administrative access sounds reasonable, and I think that's even already possible with Firefox ESR? I'd also consider an unbranded version of Firefox equal to the branded one, with the unbrandedness being an "appropriate warning". It does need to support auto-updating first, though.