They could've given the privacy and general Firefox communities ample time to scrutinize the protocol beforehand.

Like when they announced they were working on it in 2022: https://blog.mozilla.org/en/mozilla/privacy-preserving-attribution-for-advertising/