I didn't know node got that too but it says right at the start that malicious programs can bypass it. What's the point then?

The Docker of JS runtimes. Deno will get picked up by the community. But CF should sponsor it for at least 250k a year.