when I was young, people were taught to avoid running code downloaded from untrusted sites.
then macros and viruses of macros came up, and people were taught to disable macros.
now web sites demand people to enable javascript, i.e., to enable "macros" so that the web site operators can install and run programs on the guest users' computers.
that's not a nice way to treat guests!
https://www.fsfla.org/~lxoliva/#specmelt
https://www.gnu.org/philosophy/wwworst-app-store.html