As somebody who browses with JS disabled by default: Would you let me give you a 2KiB executable of native code? Probably not. What makes you so much more confi

As somebody who browses with JS disabled by default: Would you let me give you a 2KiB executable of native code? Probably not. What makes you so much more confident that if I give you 2KiB of JS, that it's not going to exploit you? We are far past the "do the right thing" plea. At this point, many major sites are simply not on my browsing menu, and I write tools to extract any data that I care about. It is now a systemic issue: How much do you trust random publishers to not attempt to compromise your Web browser?