Firefox's password manager stores passwords in clear text unless you use a master password (very few people do).

This means that any process on the computer can read them.

It also means that, unless you also use full disk encryption, a stolen device means you're fucked.

Chrome and Safari use the OS's keychain at least, so there is some level of security.

And a standalone password manager has its own encryption.