That assessment seems right... I can't find any package that still build depends on xulrunner (using osc whatdependson) or has a requires at runtime on any package built (using the detail view page on each rpm in OBS). Sounds like a good moment to drop it