NRF on espruino wifi?

Yes, that's the plan - it should have come out much earlier but Pixl.js took priority

i'm finding how unfriendly it is to secure ble devices

You mean to stop people getting in? Did you see http://www.espruino.com/Puck.js+Security ?

I guess that's one of the things you get when you run Espruino on the BLE device - there's a lot more flexibility than if you just use the UART Friend.