10 years ago, it was nearly impossible to browse the web with Flash disabled. Which means that most people had it installed, and thus a vulnerability in Flash would mean all users were exploitable. Browser vulnerabilities only mean the users of that browser are exploitable, which limits its scope somewhat. Of course, the Chrome monoculture that has established itself doesn't help here :).