This ecosystem keeps baffling me... How come there are so little checks on what can get published or how the command line process parameters.

Still a young project but that looks like an interesting approach. At least it would make for much smaller bundles than Electron while still enabling the same type of uses. I still have slight concerns about the complexity involved because of all the layers or how much memory this can consume (akin to Electron). Let's wait and see how it evolves.