As a retired graybeard, it's weird to me that people run unsecured JavaScript on Nodejs all day without a second thought. Powershell scripts have to be signed or explicitly trusted. But JavaScript on Node... nada.
Why? It's no different than any other code. That's the whole point - the cover story is that it's a take-home coding test with some sample code provided.