It's not like native OS features don't have security vulnerabilities. At least all the major browser have at least some major portion of their implementations that are open source projects. So if you're stuck working on Windows or MacOS, at least you can know that Web browsers aren't limited to one vendor finding and fixing those defects.