@andreasdotorg @lanodan @ariadne people constantly miss the forest for the trees in exactly this way. The asset to defend is usually /not/ the execution environment. So if you spend all your scarce resources rewriting things to be able to defend one part of one layer of one of the execution environments that impacts on the asset to defend, you've misallocated. Especially where effective compensating controls already exist.