Do you trust saving CC numbers in Firefox?
I'm just scared that they're saved with reversible encryption on the disk, then malware could steal them
You're viewing a single thread.
If Firefox can read it from disk without a password, any other program running as your user can read it from disk without a password. But to prevent this you can encrypt your Firefox profile with a password.