Because the web is an fundamentally untrusted medium that runs this code just for the 21st century equivalent of opening a book.