Hacker News Reader

I was equally confused. I'm guessing Firefox doesn't use the OS proxy settings, therefor wasn't getting MITM-ed

It does not. Firefox has it's own implementation, which is pretty great (supports all kind of proxies/socks).

That's my current best guess too. Which would imply that Firefox users are...fine? Hopefully?

Perhaps not