the defects in software like Firefox are finite

That’s a optimistic take. I don’t think that a software as large as Firefox/Chromium can ever be 100% secure. Especially not with the fundamental design errors ( js-sandboxing) of the modern web.

In other words: at any given time, only one of [sandbox or renderer patches] needed to compromise the browser would be available in the patch gap

That’s clever.