> Pretty surprised that raw realloc()s are widespread enough to warrant a note like this.

Firefox is a large, old codebase. After working on it for a while you stop being surprised by almost anything :)