How did we paint ourselves into this corner where the only way for our websites to exist is to run a different person's arbitrary code on our visitor's devices

How did we paint ourselves into this corner where the only way for our websites to exist is to run a different person's arbitrary code on our visitor's devices every time they open a page?