Your outsourced IT provider charges for simple configuration changes? That’s a yikes from me. I worked in MSPs for years and those sort of changes were always covered in the standard contract.

It’s no different than controlling add-ons via GPO like we did in the old days of on-prem. No extra cost associated.

Intune can manage Firefox add-ons btw, no need to use any extra systems.

Were you using a public or private tracker?