This just sounds like a bunch of vaguries that could be written about any framework. And React works fine for small projects. There’s no need to loop in a bunch of dependencies like css in js or graphql either I’ve been using it for years.
I get your point but also this is what whistleblower laws are for. A lot of times it’s in the company’s best interest to comply… until 50%+ of the population opts out