Funny how mainstream security recommendations are "don't run any weird attachments or untrusted software" but then they go "unless it's javascript on a random website, then sure, nothing to worry about, it will just run a 200KB bundle and probably fingerprint you and track you and share your personal data and with our 842 trusted partners, but that's cool, don't overthink it and if there's a popup just click accept"