[riquito]

If something breaks out and can run as your user you're done for. For example it could put an alias in .bashrc for ssh to evilssh and you would never know it (until it's too late).

Running firefox not as root is a good idea, but keep in mind that if a user run an evil application, that user is utterly compromised.