A web accessible runtime, regardless of language of origin, is a giant security vulnerability and always has been. Despite language purists insistence to the contrary there isn't a secure language ecosystem, never has been, and all current evidence suggests there never will be.