My immediate thought was that it was a security move, owning the supply chain, etc., given the recent string of npm backdoor attacks.

But this cloud hosting angle makes the most sense. I didn't know about Bun's cloud runtime offerings. It will allow Claude to publish its Artifacts without the need for third party hosting.