Firefox isn't the problem, you're trusting that the site you're using doesn't take that private key and do something bad with it. The more sites you trust, the greater the risk.
Discussion
hooo, yes ! thank you so much . It's very clear now .
the website, the domain .. those are centralized. need to trust them