It’s a tool for the developer, but a security risk for the user. The web should have had a more restrictive set of a features. This would ensure websites operate more similarly to each other and abuse be less rampant. We should have been very conservative adding features to the web, instead of rapidly embracing new technology for short-term benefit.

I had JS off by default on my smartphone for about three years. The web was a miserable experience, not because of a lack of functionality, but because of broken functionality.