Worse: even if the person (or organization) providing the binary is well-meaning, they would need some serious resources (mostly programmers) to provide securit

Worse: even if the person (or organization) providing the binary is well-meaning, they would need some serious resources (mostly programmers) to provide security updates quickly enough. The least resource-intensive way to provide attack-resistance near the level provided by Google's Chrome team would probably be to notify the user when a vulnerability is disclosed so that the user can either switch to Chrome or restrict their browsing to safe sites till the binary provider can get a security update out. I know of no one doing that or providing timely security updates however except Google, possibly Opera, possibly Brave and probably some day soon Microsoft.