javascript's insane popularity is a ticking time bomb for security - every other lib out there is a security nightmare waiting to happen, and devs just keep on consuming