1. People change their minds over time.

2. JXL is waaay more complex than Brotli so the risk of vulnerable implementation is also higher.

They should have demanded more rigor from the Brotli library, same for countless other dependencies chromium has. But there's no irony.