The real problem is that Mozilla didn't use that money to achieve financial independence and instead just spent it each year, doing the organisational equivalent of living hand-to-mouth.

Legit.

And the rest is legit too :

• dependancy to Google searches
• as private NGO, heads of Mozilla are paid in millions and its administration cost 30%, way to much compared to other NGO.
• why prividing a VPN as it is not the best way to provide privacy, the browser still be identified by a fingerprint; though some informations are blocked
• ineffective side projects, which divide resources; at least there are trials