Sounds like you're looking for https://yaak.app/.
EDIT: There's one called Posting which seems to be the most popular: https://github.com/darrenburns/posting
I think Electron gets a bad rep mostly because big companies use it to build low quality apps.
Then second aspect is the "well-hidden" JS runtime or the general dislike of Javascript, but this point has been explained by other commenters well enough.
That’s not needed. Generally there’s a webview available on the system of choice. All major platforms have it, including mobile and many Linux distros.
> vulnerabilities
Such as? I mean yes if you load remote content with local access to FS etc (although that’s not within the webview). But you don’t need to (nor should you).