I think a much bigger concern is the ecosystem. The node ecosystem is built around having third-party dependencies for everything, which makes it impossible to

I think a much bigger concern is the ecosystem. The node ecosystem is built around having third-party dependencies for everything, which makes it impossible to meaningfully vet the code you're running, and once a dependency gets hijacked, all its dependencies are screwed too.