I've used it in a project of mine which allows you to upload and control your music library like iTunes using an html/js interface.
I'm not an iPad owner, but I'm thinking it wouldn't hurt if iPad owners would use your site from the iPad, too.
Someone could easily steal my car's stereo even if I lock the doors, by using a slim jim/lockpick (downloader tool) or smashing my window (rip audio straight from the sound card). There's no way to 100% stop determined people from stealing my stereo, just like there's no 100% way to stop determined people from ripping our content. But that doesn't mean I leave my car unlocked.
Also right now we use the flash piece as a proxy for making service calls that would be otherwise significantly more difficult/impossible through javascript's crossdomain restrictions.
This is one of the major limitations of the HTML5 + Javascript stack, and one that will have to be solved before we see even more widespread use on services like Hulu or Netflix.