There are forks such as ungoogled-chromium but why would you use them when you could just use Firefox?
It’s almost not even a competition anymore.
https://www2.computerworld.com/article/2978984/who-can-stop-...
For those who think I'm just jabbing and that a VM would be too unpactical: at work (we're a security firm) we have a fresh VM for each new project for compartmentalization. Our browser, tools, everything runs in there and nothing should ever reach the host --- unless, of course, you have a VM escape, but then you need two zero-days instead of one. For more sensitive projects, even more measures are taken, but that's rare: you have to draw the line somewhere.
Just saying "Chrome is the only secure option" is a little too short-sighted I think.