How much of that is due to the difference in the amount of attention paid to each code base, do you reckon? If you're a security researcher, spending months of

How much of that is due to the difference in the amount of attention paid to each code base, do you reckon? If you're a security researcher, spending months of work on a browser with market share of more than 90% makes a lot more sense than on a browser with a market share of 2%, unless you're going after a specific individual who you know for sure uses that specific browser.