>> > HTML/CSS/JS is considered 'hackable' because it's widely understood by today's semi-power-user audience
> I think that's related to the high fault-tolerance in Javascript.
Also, in Electron apps you can access the Chromium Dev Tools directly in the app (unless the app author has disabled it). Chromium's Dev Tools are pretty much the gold-standard for hacking during runtime.