[userbinator]

The majority of Web users use browsers that do not have a XUL extension model

And the majority of these users may have no idea what an extension is either. That doesn't mean all browsers should be dumbed down to cater to the lowest-common-denominator who will manage to infect themselves regardless of how featureless and "secure" browsers become.