Google offers rewards for reported Chromium vulnerabilities. $500 for a normal one, $1337 (very droll Google) for a particularly clever one. Make a good part time job for some folks I would imagine.
I’ve switched to Chromium myself for a bit although I may go back to Iron at some point. I really do like some of the features – installing or enabling/disabling extensions without having to restart is a dream for example – but the overall browser experience itself is still far from perfect. They need to get that sorted before I’ll consider switching fully from Firefox.
If only Firefox could get the database bloat which causes long launch times fixed – and I have tried SpeedyFox..