@lxo RE: https://gnusocial.net/notice/9688345

When I saw Aral's post, I thought he couldn't mean what he said in https://mastodon.ar.al/@aral/106532380339054212 ... surely he knows that generally, #JavaScript is hosted (and thus controlled) from the server, but runs on the local client. And therefore is only as trustworthy as the server's owner/operator.

A high JS front-end requires a high-spec client machine (see all the people complaining about PleromaFE's slowness and browser crashes) and as soon as the organization hosting the JS determines that their interests require data centralization, that scripting can send it all back to the server without the user ever knowing anything changed.