Aren’t derivatives like Pale Moon and Waterfox somewhat problematic because they don’t necessarily get Firefox’s security updates in a timely fashion?
On an unrelated note, it would be neat if someone illustrated a dramatic spike in web ad revenue corresponding to the onset of this bug.