To expound on this: It's nearly unconscionable for a security-oriented site to mandate JS for basic functionality. There were no alternatives provided, the nosc

To expound on this: It's nearly unconscionable for a security-oriented site to mandate JS for basic functionality. There were no alternatives provided, the noscript blurb did not offer a list of domains which were serving the JS, there was no fallback rendering, and so we are forced to trust an unknown party to execute code in a leaky ambient jalopy of security failure. If we stop pointing this out, then we lose.