pledge seems like it could also help in another scenario that the recent npm issues should make us worry about. When using a third party library, it should be

pledge seems like it could also help in another scenario that the recent npm issues should make us worry about. When using a third party library, it should be possible to have more faith that it's not doing something unexpected. So not only can it protect you against ingress attacks, but also potentially against malicious code you might accidentally include in your software. (I'm assuming of course that the third party library can't reset the pledge)