They are not allowed actually. However maybe a few were anyway? As far as I can tell, this attack was fully unsuccessful anyway.

They probably discovered phishing attempts with a link to a page deploying a curious payload.

Regardless of my post above, keep in mind I do use Firefox primarily and see nothing wrong with it.