They can only do JS cyberattacks?

Maybe they need to use RISC-V assembly ;).