Some people have valuable data inside their browsers. Javascript code can access this data.
Also, browsers aren't bug-free, and enabling Javascript significantly increases the attack surface.
Also, browsers aren't bug-free, and enabling Javascript significantly increases the attack surface.
If you disagree with me, and believe it can, I would just love to see a webpage that dumps out valuable data inside my browser. I'll visit it without any browser plugins using the same session I have been using for over a month, promise!