Try deactivating JavaScript and look at the page. For $18M i would expect something else.
Seriously now, what is it, 1999?
The intersection of "people who deactivate JS" and "The addressable market of Four Seasons Hotels" is likely small enough that the lost potential sales wouldn't even cover the cost of development.
And i dont think that money was an issue in this project.
I think it makes sense that high-value employees with access to sensitive information get basic cybersecurity education. Therefore, some of them block JavaScript.
In no other industry do consumers get that kind of luxury. It'd be like the music industry putting new releases on cassette tapes for the people who haven't upgraded to CD or MP3 yet.