So is basically every single website you visit and all the data you share with them wittingly or unwittingly. Pocket isn't a password manager, it's a short scrapbook of things you want to read later.
You don't get access to the source of any site you're sending HTTP GET or POST requests (dynamic content) to with Firefox, yet you're complaining about client code for Pocket?