[hlieberman]

Mmm. You still can, if there's no master password enabled. But that's a distinct issue from this. Here, you're going from a state that should be entirely safe ("signed out"), to retrieving all of the secrets that are held.

Because Firefox doesn't have sign-in and sign-out like Chrome does, the principle of least surprise kicks in.