This is essentially the same problem seen with various antivirus software implementations: uBlock helps prevent malicious ads from running, but (by nature) has

This is essentially the same problem seen with various antivirus software implementations: uBlock helps prevent malicious ads from running, but (by nature) has access to run on just about any site and itself has to handle potentially malicious code. So it's a tempting target for attack, just like AV software is a tempting target for attack.