Re: Which reminds me...
"how to get rid of pocket."
about:config
browser.pocket.enable false
As well as the above, I go as far as searching for pocket, and removing the URL's it visits too. Can't be too safe.
As for inbuilt ads - adverts have never been a source of malware, ever, have they? /s