These seem like pretty weak arguments to me, especially if you were able to restrict execution to resources in the bundle (maybe that means no "eval" -- fine)

These seem like pretty weak arguments to me, especially if you were able to restrict execution to resources in the bundle (maybe that means no "eval" -- fine) Most languages permit similar amounts of runtime dynamism, they just don't make it as easy as JavaScript. Actually, in some ways JavaScript is better than other languages in this respect: * Using closures to encapsulate "private" variables is pretty bulletproof, AFAIK. * ES5 features like "Object.freeze" and "strict mode" * Object-capability safe subsets of the language, e.x. Caja, SES, etc * CommonJS-style module system