[riquito]

Opposite to Lavabit, Mozilla can't decrypt your data, so I can't see this happening, unless they change the open source client code without anyone noticing.

[rhelmer]

The "change the open source client code without anyone noticing" attack vector is important too: https://brendaneich.com/2014/01/trust-but-verify/