They really just can't get a break. When they take money from Google they get attacked. When they try to create other revenue streams (pocket, vpn, etc.) they get attacked. I don't think you want the browser to be a paid for subscription product and the donations aren't enough to reliably cover browser development.

Maintaining and keeping secure a large standards compliant browser is decidedly expensive. And most of the expenses are not one off they are ongoing.