We detached this subthread from https://news.ycombinator.com/item?id=20052893 and marked it off-topic.

Firefox's sign-in uses client-side crypto to ensure that your data is only accessible to you, not Mozilla.