Technically, a browser does not become insecure the moment (upstream) support is ceased. If a vulnerability is discovered, Purism could still patch it.
However, I’ve moved to Brave. There’s so much to love about it (as I wrote in the Howto).
And I think it is well aligned with the privacy and freedom goals of PureOS.