PHP runtime? PHP is incredibly fast. I don't install sketchy plugins on my WordPress sites so security breaches are a non issue.

I'd be more worried about one of those 10,000 dependencies in your React project doing something malicious :)