Hacker News Reader

Not for mobile. The default is to have everything sensitive locked down.

They are victim of Apple's security horror story. Apple advertises their mobile app sandbox system is poor, to protect their dominated store.

The sole criterion for JavaScript was to design something that could be shipped as fast as possible. The early browser wars were all about pumping features out. Security had nothing to do with it.

> Javascript was designed to be secure-by-default

It absolutely wasn't, lol?