FFmpeg is clearly better at fixing security issues. Most CVEs are fixed in FFmpeg significantly earlier than in Libav.