Ask HN: are "isomorphic" JavaScript frameworks secure? How?

Isomorphic frameworks are where the same code runs on the backend and frontend. Abstracting away the client/server relationship sounds like a bad idea to me. Is this really secure? Do people who start out using these frameworks have a higher risk of leaking something to the client that shouldn't be?