This part keeps me concerned.

Not saying the contrary, but if uses NodeJS it cannot be “fully” secured. NodeJS will be always a weak link.

No. Instead of embedding chrome everywhere like in electron it instead uses the platform’s native things, so a webview2 control for windows, embedded safari for mac, and no clue what it uses on linux. That’s why it’s smaller, but that also means that you can have differences, though thankfully all are webkit based at this point so it’s “mostly” uniform, and it doesn’t really shrink its memory usage that much either.

Yes, it’s better than electron, but it’s not a high bar to be better than electron, lol.

Always prefer platform native GUI’s, or Qt, Qt is best other than its lack of a C API and occasionally garbage license handling from their parent company.