Those are bad examples because they both run unsandboxed. The recent CPU vulnerabilities aren't uniquely bad for Javascript specifically. They're bad for wanti

Those are bad examples because they both run unsandboxed. The recent CPU vulnerabilities aren't uniquely bad for Javascript specifically. They're bad for wanting to run unprivileged code. Javascript in regular web pages just happens to be the most obvious example of sandboxed code in desktop computers.