In the wrong hands, the changes could enable state-sponsored internet surveillance says Mozilla’s Chief Security Officer