The number of browser exploits requiring JS compared to the number of browser exploits not requiring browser JS disagree with your assertion. The distinction i

The number of browser exploits requiring JS compared to the number of browser exploits not requiring browser JS disagree with your assertion. The distinction is that JS is a complex and turing-complete language that browsers put a lot of effort into making fast and memory-efficient. And as a result JS doesn't exactly have the best security record.