This is why people use NoScript. Not that we're Luddites, but rather arbitrary scripts means arbitrary vulnerabilities that are automatically exploitable. It's

This is why people use NoScript. Not that we're Luddites, but rather arbitrary scripts means arbitrary vulnerabilities that are automatically exploitable. It's not that we don't want to see your cool new site built in Angular 2.0, but rather the principle of least privilege[0] is even more relevant with respect to the web. People wouldn't think you're crazy for leaving Java applets off by default (even when they were popular), and it's an ad populum fallacy to say that just because everyone uses JavaScript you should trade your own personal security so that developers can use AJAX instead of a form POST. [0] https://en.wikipedia.org/wiki/Principle_of_least_privilege https://en.wikipedia.org/wiki/Principle_of_least_privilege