But disallowing JavaScript by default and selectively enabling it for specific sites remains a much safer option than letting all sites run JavaScript unrestricted all the time.

"For fun," he built a complete PC emulator in JavaScript, and then used it to run a fully functioning version of Linux in a web browser. How did it turn out?