Here is an alternative view from Theo De Raadt, OpenBSD founder: “[firefox catching up with chrome’s security] is lipstick on a pig”: https://marc.info/?l=openbsd-misc&m=152872551609819
There's also a process for Asynchronous Panning and Zooming (APZ), but that probably doesn't help much with security.