The hard part is the rendering engine and security. Both are done by the maintainer of the upstream source, i.e. Mozilla.