1. Yes, it works in private/incognito in both browsers, but you need to manually enable that in your extension settings.
2. No, it only affects Facebook.com tabs
3. The source is openly viewable and anyone can confirm that there are no security concerns. Many others have done this and approved it, as can be seen by the many users and high ratings for Firefox, Chrome, and Opera.