Comment by sp332

Data is encrypted client-side, so even Mozilla can't read it. If someone hacks Mozilla, they could get your encrypted data, but without your passphrase, they won't be able to read it. On the downside, if you forget your passphrase, you won't be able to read your data either (you have to wipe your account and start over).