Mozilla has the capability to handle compromised addons; this whole mess happened because they wiped out every version of uBOL except for the earliest one.

They just haven't used that capability responsibly... Yet.