This should be the mentality of every company doing open source.Great points made.
That sure sounds like bad faith to me.
Ooh, now I want to try convincing people to return from JS-heavy single-page apps to multi-page apps using normal HTML forms and minimal JS only to enhance what already works without it—in the name of security.
(C’mon, let a bloke dream.)