FireFox is currently less vulnerable because it does less
Firefox is loaded with features that IE doesn't have. Firefox also doesn't use system-level libraries as its engine and therefore any compromise of Firefox isn't automatically a system-level compromise.