I remember reading someone talking about how Proton couldn't be that secure (ultimately) because they relied on a javascript front end.

I recalled this when I read some crypto security efforts were focused on removing any javascript dependencies. I was like... hmmmm.....