JS is a vector for browser exploits and privacy invasion. No other language is commonly used for these things.

Not even things like batch files and visual basic scripts on windows? Everyone seems to forget we had decades of dodgy scripts and activex controls in our browsers for years before javascript became the thing it is today.