We're not running arbitrary shaders in Firefox. Shaders are sanitized via the ANGLE library so that only known shader functionality that "should be safe" can be used.
The concerns here are about using that known functionality to do DoS attacks, or using bugs in the implementation of that functionality to do something unsafe.