I'm well aware of what the web is like without JS. I know it's usable. I'm saying it's not convenient. Whitelisting is not convenient. If people are pretendin

I'm well aware of what the web is like without JS. I know it's usable. I'm saying it's not convenient. Whitelisting is not convenient. If people are pretending it is, they're doing a disservice to the security community. Kinda how like people pretend GPG is usable and convenient, thus holding back progress in the security UX front.