> So why don't we fork the chromium upstream code and only merge security patches?

Are you volunteering to do this? Do you have the time for all of that?

Edit: Why not just use firefox?