So, I'm not a fan of officious control/policy for somewhat standard things that dont warrant stringent policy address. That being said some at my current client are...

Thoughts on a healthy level of control to Javascript usage with and on prem farm? Anything you would bake into policy if king for a day? Related, any tips or particular footnotes to be congizant of if being configured?

"Security concerns" was uttered by the opisition party, so feel free to just validate or rage at the ignorance there...

...I'll come back and add my personal thoughts later, just wanted to float the notion untainted first.

Thanks in advance and I'll hand out beer IOUs for a healthy debate/arguements/links :)