The moment I closed the Pocket browser tab, Firefox RAM and CPU usage went down by half. The Pocket login page is also in some sort of CloudFront loop. What's going on over there?

It appears that both Anatsa and Spynote can now bypass Android 13's Restricted Settings mode

Anatsa Trojan Returns: Targeting Europe and Expanding Its Reach

The Anatsa trojan returns, targeting Europe while expanding its reach.

https://cryptax.medium.com/android-spynote-bypasses-restricted-settings-breaks-many-re-tools-8791b3e6bf38