a better argument might be that chrome protects their own vs a research group in google switzerland, however as other mentioned the security implications of another unsafe binary parser in a browser is hardly worth it
https://blog.cloudflare.com/uncovering-the-hidden-webp-vulne...
FWIW webp came from the same "research group in google switzerland" that later developed jpegxl.