You made a good point but accepting JS in a currency field requires validation + sanitization.

Validate for functional errors then sanitize for injection issues.

Hope it makes more sense now! Sorry for any confusion from previous comments or post