[fredsir]

IIRC, that's all in place, and has been for quite a while.

[symtos]

Another reason is that the official Firefox builds for at least GNU/Linux doesn't employ standard exploit mitigations (stack canaries, position independent code, read-only GOT).