The author seems to make good points but they lack risk assessment intelligence. Software security’s risks are technically challenging to exploit and require law breaking. If you’re working for a crypto exchange, then maybe this is an issue for you.

Even in that case, it’s way more likely that someone will fall for spear phishing then importing a JS library would result in being hacked. It’s important to consider the statistical likelihood that your vulnerability will be exploited when considering security.