I guess, since all the JS runs locally, you don't have to worry as much about things like privilege escalation?