As Odoo is not using a "normal" webserver setup such as Apache or Nginx, yet requires node.js.. I am left with a security related concern:

If including javascript in an xml view for an Odoo module, is that js run server-side via node.js or is it still run within the browser?