The thing that freaks me out about Pi is it seems to have zero sandboxing or security guardrails unless you explicitly add them. I guess it's fine if you're only ever running inside a VM or a throwaway machine anyway.
WRT security, I recommend you skynot to use Pi (it's in the sweet-spot IMO): https://www.npmjs.com/package/skynot
I wrote it, in case you have any questions AMA.
WRT security, I recommend you skynot to use Pi (it's in the sweet-spot IMO): https://www.npmjs.com/package/skynot
I wrote it, in case you have any questions AMA.