That is far from the only concern. For me, the biggest consideration is trust. With such a small maintainer base, you are placing a large amount of trust in the

That is far from the only concern. For me, the biggest consideration is trust. With such a small maintainer base, you are placing a large amount of trust in their team. There would be huge motivation in creating a privacy-focused browser that secretly slurps data and/or monitors users somehow[1]. Using a project like this would require me trusting a small-handful of people I don't know at all, and aren't represented by an entity I somewhat inherently trust (Mozilla). I can't say my logic is without holes, for example I don't do much to verify my trust in Mozilla, but you have to make generalizations in this field or you would never get anything done. [1] If you need a real-world example, see Anom.