It also seems like this extension has vulnerabilities INSIDE of it, so that raises some larger questions.

From that post, someone states that Firefox may not have the access required to remove the registry key for application extensions (because that is all it is for extensions installed this way) and thus the Uninstall button is disabled. I think that given that circumstance, a reason should be explained to the end-user of WHY.