If the FF release had been post-1.0, I'd agree with you, but the FF 1.0 milestone won't show until sometime in the middle to the end of the 4th quarter.
When comparing that to Microsoft's track record of vulnerabilities and fixes (or non-fixes as some might point to), I'd say that Mozilla has a pretty damn good track record.