Hmm.. that is not what I meant. Rephrased it to "Any suggestions which distro takes security serious?" now.

Since it seems that Debian has decided to not patch Chromium for months now, how do I know they won't do the same for Firefox at some point? Or any other software in their repos?

I would prefer a distro which promises to keep all software in their repos secure for a certain amount of time. Even if that means having fewer packages than other distros.