Did you know that every security exploit in the past has involved a processor running code? Bro, do you even basic security?
Sure it sucks, but it's still irrelevant.
more competent than thou
Not at all what I said. Definitely not true, that's for sure.
The point is that, in the eyes of those of us who don't enjoy getting our boxes pwned, a site that requires JS without a damn good reason is a site that is broken.
No, that's not the point at all. The point is that GSS solves much of what causes CSS to be a massive clusterfuck. It's nice to see that something exists at least trying to fix what is a completely broken system, causing a huge amount of collective stress amongst people who have to develop for the web.
Yes, Javascript can cause issues and exploits. If you blow off a massive improvement because you JS circlejerk so much that you can't even see past your own whitewash to realize that the only reason it uses Javascript is out of necessity, then maybe you'd see why something like this is a good idea.
If you want to stop yourself from seeing anything that uses JS on the platform it was designed for, then by all means, please continue to be a massive idiot under the guise of "basic security".
But let's deal with something else. Javascript can cause exploits, as can having a web browser in general. That is very true. Known unknowns (what JS can exploit a browser) are scary, but let's not get ultra-paranoid over something that happens extremely infrequently and doesn't even affect the majority of people. If you are for some reason extremely paranoid about Javascript but not web browsers in general, get NoScript, and only enable on sites you trust (though in reality only on sites that are really sketchy, e.g. websites that claim to hack your friend's Facebook accounts!!1!). Boom, problem solved. What started out as a 0.000001% chance of getting exploited is now even closer to zilch. Worried about WebRTC APIs gaining access to your already external IP addresses? Disable them in your about:config! Or even better, don't go to sketchy websites that use WebRTC APIs to gain access to your already external IP addresses. If your fingernail is infected, chopping off your torso is overdoing it.
Of course, you're human - you will have an instinctive need to believe that you're correct, and so instead of reading what I say, and actually letting a signal or two pass between neurons, you'll instead state that the extreme paranoia you preach is merely "basic security". I can't stop you from doing that, but you should give a thought that you're needlessly incapacitating yourself for miniscule gain.
And for fucks sake, don't be ridiculous about JS when the thing I link to isn't even about JS. I'm sorry that not everything on the web is 100% Javascript free for you, the center of the universe, but don't expect that I can do something about it.