idk how you spare the effort.

When you've been building networked systems for longer than JavaScript has existed, it no longer takes effort to spot design choices that put users at risk. When you've watched endless vulnerabilities be exploited over the years, it's not paranoia, but a real-world problem that impacts real people. At that point, the flaws are impossible to responsibly ignore.

Spreading awareness and showing people how to build safer systems does sometimes get tiring, but I think it's important.