The configuration of browsers isn't defensive enough, that is the problem. It's also absurd that most popular websites don't work at all nowadays without Javascript.