I think the most secure thing a JS platform could do is provide a decent vetted standard library, so that one doesn't have to bring in too many potentially inse

I think the most secure thing a JS platform could do is provide a decent vetted standard library, so that one doesn't have to bring in too many potentially insecure random developer github projects in the first place.