somebody who finds and exploits a firefox vulnerability could probably root SR in the first place