flash was crappy, had poor compatibility and tons of vulnerabilities

but it was replaced with.. nothing. and there is still a gap in that market for novice creators that all the webgl/html5/toolkit-of-the-week has yet to cater towards.

Jobs interest in bad-mouthing it in the early days had more to do with cutting development costs on his side, if flash and adobe is the devil there is no need to spend time and effort developing compatibility layers for it, and it's a chance to wedge the populous towards a solution he can control more closely.

'vulnerabilities' was just the talking point he used to do so.