So it is not a security risk if you believe Twitter to be benevolent? But it is if you think it is malevolent? Javascript is already a privacy and security vi

So it is not a security risk if you believe Twitter to be benevolent? But it is if you think it is malevolent? Javascript is already a privacy and security violation and 3rd party embeds inflate it for every connection so you shouldn't allow the RCE anyway.