> That approach is not without downsides. It requires strong compatibility guarantees and version management. Static linking the runtime also has significant d

> That approach is not without downsides. It requires strong compatibility guarantees and version management. Static linking the runtime also has significant downsides. One of the worst is how it puts the burden of pushing runtime security updates on the app. Frequent JRE downloads because of security patches is annoying, but downloading N copies of chrome every for all of your apps is insane. Of course, this also requires that each app update itself to be compatible with the new versions every time there is a security patch. The entire point of including a specific version of chrome is to avoid these updates, so the very idea of Electron implies the app is not designed for security.