Where are you getting that data? I'm genuinely interested. FWIW I think it is probable that the IPC APIs into and out of the sandbox have been more thoroughly

Where are you getting that data? I'm genuinely interested. FWIW I think it is probable that the IPC APIs into and out of the sandbox have been more thoroughly fuzzed and otherwise tested in Chrome than in Firefox. I don't know how that translates into actual security though.