Are these only "just" pulled from the online catalog, or the browser itself blocks installation too from file?
If the prior, I don't really like this action, but my browser won't change because of it (for now?) and also Mozilla and Firefox served me well in the past almost 20 years since I use it, I trust these guys.