Given the project is so small, I wouldn't trust their future response to be rapid even if they have been in the past. Right now most security fixes come in the

Given the project is so small, I wouldn't trust their future response to be rapid even if they have been in the past. Right now most security fixes come in the form of merging upstream security fixes from Mozilla. As their code base becomes increasingly divergent to the Firefox head, merging in upstream security fixes will become increasingly difficult and increasingly cumbersome.