This report is apparently invalid, but it is true that Firefox has a pretty huge number of old bugs, some of which probably have unexamined security implication

This report is apparently invalid, but it is true that Firefox has a pretty huge number of old bugs, some of which probably have unexamined security implications. Some will be old enough to vote in a few years. Most are "obviously" minor, but I worry about interactions. Is there something like Metcalfe's law for defects?