Because you would have to add runtimes for all those languages with ties to the DOM. It's hard enough to keep JavaScript secure. It would be a nightmare to keep different implementations of JavaScript, Ruby, Python and client-side PHP secure on different operating systems.