Hacker News Reader

Is this also true when using JavaScriptCore directly? Or do you only get JIT compilation in the context of a web view?

Only in a web view. The point is that the JITed code is in an isolated process with few permissions.

And vitally it can allocate executable memory, which nothing you write can.