It ought to be possible for the page to disable JavaScript with a meta tag:
<meta name="noscript">
The browser could put an extra icon next to the https padlock so the user would know they were viewing a document rather than an application.