I suppose they would argue that's the same but I don't think it is good enough (especially for a site preaching privacy values). It should be down in the footer, or even better they should be using Piwik and skipping GA completely.

To me, this feels like a website built by a pro-privacy team who had some marketing or PR person slap the GA code in there with no comprehension of irony at all.

EDIT: Also to note that mozilla.org uses UA-36116321-1 tracking and shapeoftheweb.mozilla.org uses UA-49796218-22, which indicates to me that they are aware that these are two distinctly different sites.