Unsigned binaries is good, update service is good, google safe browsing disabled is mega good, unencrypted dns is comparatively good from what i understand compared to mozilla's imperfect solution. Speed of security patches is not great, but having non-mozilla vetting on security patches is a tradeoff that is worthwhile.