Am I getting this right?
• Both Node.js and Deno grant permissions to the whole app (network access, file access, etc.).
• Wouldn’t it be better to additionally specify permissions for dependencies? That could prevent a rogue utility library from accessing files even though the app itself is allowed to access them.