While I agree in principle, there are many cases where you don't care about the statistical quality of a random shuffle, where brevity has its benefit.
So it's not that you get a bad random shuffle; it's that your code might never return from that sort() call.
And to be clear, there have been cases of "hang" bugs being reported to browser vendors in situations exactly like this one because people were writing boneheaded script like this.