According to https://en.m.wikipedia.org/wiki/Row_hammer there have been Javascript implementations of Rowhammer. Thus the Drammer attack could also be possible in Javascript and not only by installing an application.
If we could ensure (somehow) that the neo900 is invulnerable to this kind of attack this could be a strong argument for potential buyers.
There's a thread about rowhammer in the Pyra forums too [1], and I guess what Nikolaus said there would also apply to the Neo900. [1] https://pyra-handheld.com/boards/thr...whammer.78436/
On the other hand we can't do anything actively about that (we can't change the memory controller or DRAM chips).
There's nothing we could do on a hw design level to mitigate that. It's about the way RAM and the memory controller work