Re attack vector: the outcome here will just be the same as a vanilla js + html website won't it? Or are you saying that reverting to that mean takes away some

Re attack vector: the outcome here will just be the same as a vanilla js + html website won't it? Or are you saying that reverting to that mean takes away some of the security gained from SSR? Since this is an optional opt in that mirrors current usage it doesn't seem like a bad thing...