I mean if the core is from them and you can’t confidently say that the fork creator has reviewed and continues to review every piece of the code before they merge, you’re still trusting Mozilla.

If you don’t trust the source, how is a fork built from the same source going to help?

Here.