Why do you think that? There's been way more bugs in V8 over the years than the NaCl core sandbox.
For the record: I think that JS is a horrible idea too. What happened to the old rule of thumb that once you let someone else run their own code on your machine you should consider it compromised ?
People realized it's a stupid and impractical rule and ignored it.
If by "people" you mean developers, and by "stupid and impractical" you mean inconvenient.
Developers realized that their rule was stupid and impractical (not just inconvenient, but actively impractical: async interaction is faster and requires js), and so ignored it.