Historically, Firefox has had fewer security measures than Chrome. For example, full tab isolation was only implemented recently in Firefox, many years after Chrome. MV3-only extentions in Chrome also reduce the attack surface from that perspective.
The counterpoint to this is that there are much fewer users of Firefox, so it less attractive to try to exploit. Finding a vulnerability in Chrome is much more lucrative, since it has the potential to reach more targets.