This is largely a usability issue. There have been folks in the performance community complaining in the same way for years. Then all of a sudden React comes al

This is largely a usability issue. There have been folks in the performance community complaining in the same way for years. Then all of a sudden React comes along and lots of people started talking about performance because the framework made their primary task (building a website) easier. Security is much harder than it needs to be currently. Every time I deal with an OpenSSL error I die a little inside. We have scam "security researchers" distracting us on Twitter with spurious reports every week. Asking people to "think more" is a lost cause. We need better tools that make it easier to solve problems in the critical path that encourage more secure defaults than the last ones did. Most other solutions are unlikely to make an impact.