Because it is the only browser that is not tied hand-and-foot to some major global commercial player, and because each and every browser ever launched had security issues.
Even lynx is not immune:
http://www.cvedetails.com/vulnerability-list/vendor_id-5836/...