More evil has been done in the browser by javascript than anything else. It's funny that Nostr solves that by making javascript more important for browser based clients