Technically, your operating system's security model allows this. There's little Firefox could do to prevent it.

This is a historical accident; only toy and mobile OSes have any sort of application-level access control.