I think the general idea isn't that they can't but that they either won't, because they're not executing JS, or that it would slow them down enough to effectively cripple them.
i might at any rate set my PoW to be relatively cheap, which would do for anyone not executing JS.