Flash had a ton of vulnerabilities. It felt like one zero-day RCE per year.

Flash never had a good FOSS implementation until years after Flash Player was discontinued.

I was very happy about the death of Flash Player, but neutral on the death of the Flash format.