I’m kinda confused. 1. Some apps are open source, why not just send a PR? 2. Most apps are actively developed, why not just send a report? I’d understand thi

I’m kinda confused. 1. Some apps are open source, why not just send a PR? 2. Most apps are actively developed, why not just send a report? I’d understand this 20 years ago when updates weren’t frequent, or if software was rarely updated. But patching Firefox in your OS feels completely unnecessary.