I think the very success of PHP, JS, and all the other slower server-side languages is evidence to the contrary. Making the world use more compute for convenience was a real answer, and we know it was real because it happened. So why not do it again but for security?