I created an "Arkenfox-softening" script, because I find Arkenfox unuseable. This gives you a really secure browser with all functionality preserved.
Thunderbird the same, there is no preset for that so I bundled up some settings from various sources.
You can run the profile chooser with these commands:
flatpak run eu.betterbird.Betterbird -P
flatpak run org.mozilla.Firefox -P
flatpak run org.mozilla.Thunderbird -P
The files are just a user.js that has to be copied into the last folder used in the named directory. Firefox and Thunderbird create two profiles by default, one is unnessecary.
You could do it like that:
move the existing profile if wanted (chosen as if else after choosing "remove rpm firefox") to the right folder
mv ~/.mozilla/firefox/* ~/.var/app/org.mozilla.firefox/.mozilla/firefox
mv ~/.thunderbird/* ~/.var/app/eu.betterbird.Betterbird/.thunderbird/ #or
mv ~/.thunderbird/* ~/.var/app/org.mozilla.Thunderbird/.thunderbird/
install thunderbird and firefox flatpak
remove the unneeded profile
rm ~/.var/app/org.mozilla.firefox/.mozilla/firefox/*.default
rm ~/.var/app/eu.betterbird.Betterbird/.thunderbird/*.default
rm ~/.var/app/org.mozilla.Thunderbird/.thunderbird/*.default
add the user.js to the right places
# Arkenfox
wget https://raw.githubusercontent.com/arkenfox/user.js/master/user.js -P ~/.var/app/org.mozilla.firefox/.mozilla/firefox/*.default-release/
# Thunderbird hardening
wget https://raw.githubusercontent.com/HorlogeSkynet/thunderbird-user.js/master/user.js ~/.var/app/org.mozilla.Thunderbird/.thunderbird/*.default-release/
# Betterbird hardening
wget https://raw.githubusercontent.com/HorlogeSkynet/thunderbird-user.js/master/user.js ~/.var/app/eu.betterbird.Betterbird/.thunderbird/*.default-release/
Nice! You can also auto-create an unsafe unmodified (empty) profile as the insecure profile! This is not needed for Thunderbird, as there are no problems. Browsers are way more important and used for stuff like Banking (referrer header), WebGL, canvas stuff, bot detection...
mkdir ~/.var/app/org.mozilla.firefox/.mozilla/firefox/unsafe
printf"""[Profile2]
Name=unsafe
IsRelative=1
Path=UNSAFE
""" >> ~/.var/app/org.mozilla.firefox/.mozilla/firefox/profiles.ini
printf"""[Desktop Entry]
Comment=
Exec=/usr/bin/flatpak run --branch=stable --arch=x86_64 --command=firefox --file-forwarding org.mozilla.firefox @@u %u @@ -P unsafe
Icon=data-warning
Name=Unsafe Firefox
StartupNotify=true
Terminal=false
Type=Application""" > ~/.local/share/applications/Unsafe-Firefox.desktop
zenity --info --text="Your default Firefox is now hardened with the Arkenfox user.js! \n You can find an unsafe Firefox in your menu,\n named \"Unsafe Firefox\"\." --title="Info"