This is a weird phenomenon I've been seeing in some tech companies - getting rid of security ops people because technically you can link security to other BU's, like dev or even IT.

Just looking at Mozilla, there seems to be a lot of security engineers, who are probably going to have to swallow this area of responsbility.

Thing is that even in very mature organizations, preventive actions are not and are unlikely to ever be good enough to not have any need for detection / IR specialists.

Is Mozilla trying to kill Firefox? Without an active threat management team, it would be irresponsible to recommend Firefox to any of my less technical friends.

Nowadays, a dedicated, excellent security team is table stakes for a web browser engine.

They are not responsible for firefox itself but the infrastructure surrounding it from that thread.

That to me reads as the build servers, etc. How is that not responsible for a safe binary?

Yea they are surely moving to webkit after this lmao, no more funding for servo