> day 100 it would be full of security bugs, would need to be re-written for the new version of Node.js

I do not believe this is the case at all. If I'm running software locally that works on local files that I control then there is no security issue. Even if there are bugs that can be exploited, they won't be exploited because I'm in control of the data.

This whole mess is a non-issue and is only there as an excuse to push this horrible web SaaS subscription nonsense that we have. It's nothing but a stupid excuse to justify daily software updates so that companies and inject ads and remove features to push subscriptions.