Chrome runs with user privileges on billions of computers. The impact of someone hacking the software delivery chain and inserting malware is enourmous, let alone the risk for the brand/user trust. And don't forget that Chrome is not a charity project, but meant to secure Google's search and adtech monopoly. They actually pay a lot of money for Firefox to ship their search engine as default, and that's for a tiny market share.