OpenSSL keeps being updated. As for OWB, yes, the Javascript engine is a pain in the *ss. But I havn't experienced any real problems with most web sites, except for Tumbl and Youtube. The first just doesn't work most of the time and the latter you can't log into. And then we have the general bloat trend that makes slow hardware like ours having to work like crazy, especially without the javascript JIT. But this is a problem all systems are facing now: bloat.

My general conclusion is that even though OWB is rather old now it still does what it's suppose to very well. I would say it's no more nor less secure than any other browser out there. MorphOS doesn't have much of security, but we don't have mal- spy- or ransomware either.