Hacker News Reader

Leaving javascript executing by default is the modern version of opening every email attachment.

It is the default for browsers, even after you install privacy protection extensions.

Because the browser standards are defined by ad and spying companies who require it and because in the past it wasn't what it is today: dangerous.