Web itself is a constant huge security risk - Playstations 3, 4 and 5 were all hacked through Webkit, for example. The reason to kill off Flash was just because Apple wanted it gone, and Adobe didn't want to make them angry.