As a casual both Bun and Deno user, I have generally preferred Bun to Deno unless sandboxing is a concern.

I'm not quite sure I've seen a runtime, JavaScript or otherwise, that has the same network-level gating that deno enforces. Making an allowlist of addresses the default seems like it needs to be table stakes in the agentic era.