Someone who repackages/patches free software has different incentives than upstream. So generally speaking, derivative browsers are more privacy friendly, have better features, etc.

That’s not to say that upstream isn’t important. It absolutely is! It’s just that derivatives are generally better.

Vanilla firefox needs to be hardened, either manually or with arkenfox