The Firefox profile directory also contains things like its file cache and trusted CA database, so you don't need to plant a malicious extension to achieve sign

The Firefox profile directory also contains things like its file cache and trusted CA database, so you don't need to plant a malicious extension to achieve significant impact when you only have write access.