#javascript on the #www is a menace and allowing scripts to run without specific (not implicit) consent is a #security issue, not just a #privacy issue. You wouldn't walk through downtown Beirut in a miniskirt, would you?