I'm not familiar with extension development or their capabilities, but perhaps the extension author can remotely activate the malicious parts after it passes th

I'm not familiar with extension development or their capabilities, but perhaps the extension author can remotely activate the malicious parts after it passes the update process and perhaps Mozilla doesn't have the manpower to manually review the code of every extension update?