mozilla had no mechanism to restrict the privileges of legacy firefox extensions. this meant that a legacy extension could read or modify the data used by another extension or any file accessible to the user running mozilla applications. but the current webextensions api imposes many restrictions.