It's the fault of giving every random webpage the ability to run a programming language in the browser.

For 99% of the web a markup language with triggers and async loading could have been enough to implement menus, upvote posts, post login forms, and so on.