It's your code and it will run as fast as you make it, you can't expect Apple to make your code as good as WebKit.
No, but the security team tries their best to keep unsigned, dynamically generated code (such as what might come out of your browser's JIT JavaScript engine) from running.
It's your code and it will run as fast as you make it, you can't expect Apple to make your code as good as WebKit.