if I had to guess I'd assume it corresponds to defender team/department increases and funding increases
I find the Mozilla data very interesting, it seems they're consistently ahead of attackers despite producing a browser, which is more-or-less hit with 0day exploits and many other unknown bugs regularly?
I suppose it depends on the measurement methodology, since I guess if they patch those issues within mere hours of being told it counts as extremely good remediation? or maybe it's just a measurement of the "mozilla org" and their security rather than security of their products
