I think the JavaScript world has given up on all of these secure behaviors a long time back. Just look at Next.js

It has caused a complete disaster to the entire software industry.

Would take decades to recover from that mistake that was JavaScript (and TypeScript)