>>/15106/
Fully agreed. It's attack surface is different from traditional javascript in web-broser approach.

If you need secure services, it's always best to run your own. Also all chat rooms are considered to be at least semi public, so what's the problem. There's no expectation of secrecy, only anonymity.

You probably didn't check the motd.

"
Go and setup your own instance of ssh-chat, use Briar or
OnionShare to launch simple web-chat.
"