Threat model! Firefox indeed does excel for the average citizen in terms of security. While people that know some infosec think CVE count and exploit mitigation

Threat model! Firefox indeed does excel for the average citizen in terms of security. While people that know some infosec think CVE count and exploit mitigation is a priority. It has auto update for known vulns, for 0days,people who are targeted by attackers willing to burn a browser 0day on them have a drastically different threat model than the average citizen and frankly using Chrome because of CVE count is a bad strategy if you're one of those people (bromium,qubes os and other segregation based appsec is worth a consideration). You have to appreciate how much privacy counts (Chrome failed telemetry on the BSI test)