Making a browser by the people and for the people might be even harder than a open-source kernel. Keeping up with vulnerabilities is a nightmare.