Ask HN: Is JavaScript as insecure as ActiveX was at the peak?

No.

Microsoft was utterly reckless with ActiveX (as with much of their other tech) as I see things, whereas JS has had a lot of attention from people who care and know what they are doing.