In reply to Ben.

@Ben,

Hiding that a site is wordpress is the most stupidest practice the community engages in and got nothing to do with real life security.

If you are willing to lock down the admin then what security gain do you get? why do you think that node.js and react are more secure than wordpress theme code? why do you think the extra json code you will have to write will be more secure than the theme code you can write?

As for being somehow free to use more JS, no one prevented you to write JS/Ajax based themes before and people have done that. Nothing new here.