Just look at the CVEs for Firefox most of them are memory bugs. And yeah Firefox does have some rust code but its only like 10% and the rest is C, C++ and JavaScript