Mozilla is too busy trying to build online censorship tools and VR junk to bother with making their browser more secure.
Relative to the rest of the circus, I'd say Mozilla is doing an okay job.
I don't trust Brave any more than I trust Google, since ultimately they're both funded by dwindling ad revenue.