I can see merit in both sides of the argument on whether Deno should have added npm support. I lean towards the side that's excited about this release, especially for what's mentioned here: https://deno.com/blog/v1.28#security
deno run npm:install-malware
┌ Deno requests write access to /usr/bin/.
├ Requested by `install-malware`
├ Run again with --allow-write to bypass this prompt.
└ Allow? [y/n] (y = yes, allow; n = no, deny) >
This alone would entice me to start using Deno as a drop-in replacement for Node (I'm mostly running it to bundle front-end things).