Using dev edition is the equivalent of sudo.
Firefox can just install an extension from clicking a link, combine that with tech illiterate people just panic-clicking "ok" on every popup, that really is an attack vector.
I mean, billions of people click yes on a "hey we're gonna take all your data and sell it to everyone, are you okay with that?" screen multiple times a day...