Very well written, and excellent points! Thank you.

Deno has 1 year of official support left...

I liked the security model because at least they had something, unlike node.

> the permission prompt is “partially visible” (you can see an emoji)

Terminals can be configured to render emoji in text presentation form where they become monochrome glyphs that can be colored like ordinary text with escape sequences. Not something to hinge your security model on.