[chocolateboy]

> it's entirely possible to install local untrusted addons. You just have to poke some settings that are intentionally hidden from most end users

It's possible to install unsigned addons in ESR, developer and unbranded builds of Firefox. It's no longer possible to install them in the regular release or beta versions. The hidden setting was disabled in Firefox 48.

[smsm42]

I don't get this. I mean, it's ok to have an option to install untrusted code off by default. It's even OK to bury it somewhere in "advanced settings". But after that, I think you're done your due diligence in protecting me from myself, and anything beyond that is impeding, not protecting.