The answer is probably something like "that dialog came from necko, because we didn't put in a good way to propagate blocking prompts back up from the network layer in a way that identifies which tab wants the request".

If extensions were the problem an interface to actually let the extensions work would have been created. As it is you still can't implement a password manager natively.