Sure, the fact that browser vendors have better security sense than framework developers is a plus, but it's not going to be an improvement on the rest. Most p

Sure, the fact that browser vendors have better security sense than framework developers is a plus, but it's not going to be an improvement on the rest. Most people aren't getting hacked via an obscure Google Analytics + Django CSRF interaction. Not people are getting hacked via client-side webapp vulns of any sort anyway.