What does GLSA stand for? It's near the bottom where he is listing software that should be replaced. It sounds like it means "vulnerability".
The reason that many vulnerabilities have been found in Chrome is because it is a very large and complex project. The bug bounty only gives people the necessary additional motivation to work on it during business hours. Other projects that lack bug bounties have found similar numbers of bugs (Wireshark and ClamAV to name a few) due to their complexity.