I think JSPatch just offer a method about app hot fix, the unsafe part is the get of js from server, which we hava many methods to solve, and that’s App developer’s duty.
And, the author of JSPatch published this platform(jspatch.com), which offer a solution about unsafe problem.