He does raise good points. I would tell every non-technical person I know to keep JS on. Yeah, you can do bad things with it, just like you can for cookies, but for the most part there's more important things I'd have them worry about.

Really? Do you do anything relating to security?

I'm a web developer, so that's about as much as I do with security. So I'm not a security professional.

Disabling JS could increase general browsing security, but there's much better things people should be worrying about. Like verifying URLs. Going to sites you trust. Watching what you click. Installing an anti-virus. And keeping it updated. Installing updates and patches.

Install noscript if you must disable JS. Then it can at least be selective (haven't used, so I assume that's the case).

Once you throw out usability and common sense, you might as well just tell them to turn off the computer: 100% secure.