==Where MAR verification happens==
MAR verification is always done for Firefox updates in Windows. It During an update operation, it happens in the updater binary, even if the Mozilla Maintenance service is usedon Windows.
As of Firefox 40, MAR verification is enabled on OS X too.
MAR verification is currently disabled by default on Linux due to some shared library errors because of the dynamic link to NSS.