[angry-hacker]

Why doesn't Firefox simply disallow eval? You would get an error in console explaining and that's it.

[kevingadd]

Lots of perfectly sensible JavaScript code uses eval for things like feature detection and runtime code generation. If you removed eval they'd just use 'new Function' instead, which has most of the same problems.

[AgentME]

There are legitimate uses of eval. And there are plenty of other ways for extensions to be insecure besides by using eval!