I don't think there's an easy answer. Any central repository managed by the company (Apple, Firefox, Google, etc) is subject to the same thing. At its core, FF is a solid privacy browser to start with, but add-ons are needed for any of them (even Brave). People pretty much have to help others individually to get access to the tools.