Using firejail with firefox-esr works nicely, but will cause issues if you try to host a local KeePassXC instance.
Continue to use the default firejail profile for firefox, but in the file /etc/firejail/firefox-common.profile, comment out this single line:
#include disable-common.inc