It allows forcing specific extensions on, and allowing user installs is a flag.
I use the policy engine on nixos to install some plugins and disable some of firefox's dumber features.
I cannot even begin to fathom that stupid fucking decision from someone above me.
When I pointed this out, they said "just ignore that part".
Nope LMAO!
Even so I would advise you to have the lawyers re-draft the entire thing.
Let the other side know, ensure you make the change clear and initial the change. 8f they sign the contract too, your change sticks
In my country, anyhow
...and this is/was the true Firefox way. You don't need to get some other browsers on the same engine made by shady companies. You have powerful plugins.
I agree with the other person though that you should install uBlock Origin in Firefox (which works better there than in Chromium based browsers) and never look back.
https://mozilla.github.io/policy-templates/#extensions
https://github.com/gorhill/uBlock/wiki/Deploying-uBlock-Orig...
It takes literally two seconds to install uBlock Origin.
You can even preload it by baking in the xpi file.
It is a Firefox fork with sane, user-respecting defaults. Of course it breaks sites that do not respect their users' privacy / agency.