I was really reacting to the phrase "let us make simple, secure content..." as browsers aren't "letting us" do that.

You can get most of the security benefits by disabling JS in the browser.