Granting dynamic-codesigning exclusively to JavaScriptCore shows a lack of confidence in their platform sandbox and the app store review mechanism, and a (occasionally dangerous) overconfidence in the quality of WebKit's security.