Node.js, like any other technology, is as secure as its implementation. With good programming practices and regular updates, Node.js can be made highly secure for web app development.