Earlier quoted context omitted.
Of course the "attack" is easy to avoid. But you first have to know about it. Mozilla should not be planting such landmines.
Checking the bug tracker, it only does something if you have Firefox Data Collection turned on in the settings. Personally, the first thing I do is turning that off on a fresh install.
it seems there's actually a way to turn it off before installation using enterprise policies, but I have not tried it as I left mozilla's firefox long ago first for waterfox and now librewolf.