I can't fathom how they'd consider "Private" something that uploads all the sensitive information in readable form to a third party service.

In fact, If I were asked to explain the opposite of private, I might give this kind of design as an example.

It's more un-fathomable if you recall Mozilla were the people who *pioneered* local browser ML as a privacy feature. Back in 2022—when Chrome was doing language translation by uploading to Google servers, and Mozilla introduced the (actually innovative!) idea of baking small ML models into the browser,

https://news.ycombinator.com/item?id=33792447 ("Firefox Translations: Translate websites in your browser without using the cloud (addons.mozilla.org)")

And look: they were 100% cognizant, then, of how vital local processing is to privacy:

> "...called Project Bergamot. The ultimate goal of this consortium was to build a set of neural machine translation tools that would enable Mozilla to develop a website translation add-on that operates locally, i.e. the engines, language models and in-page translation algorithms would need to reside and be executed entirely in the user’s computer, so none of the data would be sent to the cloud, making it entirely private."

https://blog.mozilla.org/en/mozilla/local-translation-add-on... ("Mozilla releases local machine translation tools as part of Project Bergamot")

Even more un-fathomable, Mozilla's CTO has been writing a substack with the underlying theme of "if the AI isn't running on your hardware, you don't own it" https://newsletter.ownersnotrenters.com/

They're still 100% cognizant! And yet.

You cannot ship on device inference with a real LLM still. Average people freak the hell out if it's even 10% slower than whatever google ships. At least thats the claim for how Firefox lost all their marketshare in the first place (Which was not the case. When everyone was claiming firefox was "slow", it simply was not, as long as you used an ad blocker. Normal people like my dad didn't switch to Chrome. It was installed through a sketchy mechanism and they never noticed)

Meanwhile, if you CAN run these models locally, using your own hardware for inference is supported. It's a setting option.

Google still blasts you to install Chrome at every opportunity if you use their services, and is heavily optimized for Chrome (e.g. Docs, YouTube). That's not really Firefox's fault.