For Hello, I think Mozilla (but actually unsure who's servers?) is only involved in initial discovery and, if needed, WebRTC NAT traversal. In terms of code bloat, I think Hello is just a bit of extra javascript on top of functionality already built into the web platform.

But I admit I haven't look that much into it. I don't know how or if crypto is used. I haven't used the feature yet either and would want to know more before using it in a corporate or privacy sensitive situation.

I guess the same goes for Pocket, I probably don't need to worry about it if I'm not using it. However, for me personally, it just seems to be such a stark contrast with their position on Sync. On top of that, the browser UI is _mine_! Nobody - not even Mozilla - should be adding something to the primary interface of _my browser_ without a very good reason. And this is where I feel my trust has been betrayed for the first time.