Adobe had a decade or more to show that they could develop a secure browser plugin. They couldn't do it, or decided their resources were better spent elsewhere.

If you don't want to maintain a small army of full-time security staff, you can't ship binary code running untrusted data-as-programs on billions of consumer devices. Full stop.