Ahhh, you don't work with large places that have departments in charge of things. When you add a file to a controlled project each of those departments have to be involved. The bridge allows the C++ developer to direct inject functions via existing modules. The javascript people already have mechanisms to test for functions based on platform in their existing source. Even more people have to get involved when it is a text file which could be hacked with any text editor.
Direct injection via bridge is secure. A binary thumps it in. The only thing which can get changed by someone being evil is if the function gets called. The function already defends against garbage.
While I would never consider Windows a secure platform, that team went the direct injection route with their toolset just to try and lock a bit more down.
Bookmarks