Now.
> The sky is not falling just because they're offering something like this locked behind two separate opt-in steps.
They did the same scam with Pocket. Now, tell me how to disable that again?
You can disable it in about:config.
is what you're talking about, right?
Why the hell is a bloody plugin compiled in with a browser?! I should be able to click "delete" on the plugin screen and purge this trashheap from my system. I shouldn't have to use "hope and prayer" that a plugin isn't used.
Instead, I have to go traipsing in about:config. It's not even in preferences, or plugins, or wherever.
https://github.com/pyllyukko/user.js
You can use version control, options persist between restarts if you accidentally change something, you can use comments, easily make new profiles that share the same settings
Or you can keep complaining until every piece of software have like 3 options inside a hamburger menu
Have you checked out the alternatives? I remember IceWeasel at one point in Debian.
A more focused attack could purposely poison the daily site set with obscure bad site(s); any users that receive these recommendation should have some browsing history intersection with the bad sites.