Probably off topic: I once tried to find bad code in a WordPress theme. And it was hidden so deep and inconspicuously. The only thing that really helped was to do a diff.

In JS this can be much harder to find anything suspicious when the code can be minified.

But back to Firefox: My house, my rules. So let external developers set some more strict rules that discourage the bad actors a little.

When managers take up their positions, they must sign not only their employment contracts but also various codes of ethics and other documents.

When a survey was conducted on the misuse of finances and powers, it was found that managers who did not sign the code (because they had to study it and then "forgot" to do so) were more likely to cheat than those who actually signed the documents.