Users can probably mess with the DI node

[Tamschi]

I'm pretty sure template users can currently replace the implicit node instance used in the constructor for dependency-injection, as it only has call-site resolution.

Instead, it should be layered like the this context inside the render method, with the call-site-visible node being only a reference to the original node that's grabbed for example by subexpression constructor deference through defer and bind.