@lxo many trade-offs around in IT security, which requires a layered approach, as servers and clients have much different security requisites.
JavaScript security is in constant improvement because Web 2.0 needs it, used to much easily publish interactive content, facilitating self-expression, self-hosting and collaboration.
Note: I'm ignoring your rhetoric techniques, but mind that insults and ad hominem attacks aren't ok. I'm polite, so at least treat people with respect.
CC: @tennoseremel