well Deno was the only player who could have prevented recent npm security disasters:

built-in permission system for filesystems and etc

just forbid writing to important folders like ~/.ssh