Firefox isn't the problem, you're trusting that the site you're using doesn't take that private key and do something bad with it. The more sites you trust, the greater the risk.