This is clever and how it should be done: Mozilla sends your browser a list of links, then your *browser* runs the personallization algorithm on its end, so Mozilla doesn't get to see it. So you get personalized suggestions without the spying.
Downside I could see of this is that if you are on dial up, or limited bandwidth it wastes data, so I hope it can be disabled.