Flash is huge, it runs a dynamic-language VM which is always hard to secure, and it is constantly adding APIs. That sort of program tends to have security vulne

Flash is huge, it runs a dynamic-language VM which is always hard to secure, and it is constantly adding APIs. That sort of program tends to have security vulnerabilities all the time, in fact exactly like browsers do - they also fit the three traits mentioned above. But, better to have one such program - a browser - than two - a plugin as complex as a browser, inside a browser.