the defects in software like Firefox are finite

That's a optimistic take. I don't think that a software as large as Firefox/Chromium can ever be 100% secure. Especially not with the fundamental design errors ( js-sandboxing) of the modern web.