If focusing on security, they should consider disabling the JIT compiler in the JavaScript engine. Almost all Firefox exploits in recent years have been based around vulnerabilities in this code.