I've done my dues in network admin and I can assure you that informed users like yourself are in the minority. I've only ever known a couple of people who turned off JS as a matter of course and they did so for all the wrong reasons, as I mentioned above. I am sure you can imagine the type of "power user" I am talking about.
Anyone who is actually informed about these security issues tends to mitigate them behaviourally. It's like antivirus. Most of the clued-up tech people I know do not constantly run antivirus software; they don't need to because they never take any action which might lead to virus infection. They might scan once a week or month or something.
It's the same with JS, IMO - if you know about the real issues with it, you also know how to avoid them, and you wouldn't ham-fistedly cripple the rest of your browsing experience in the process.
Not to put too fine a point on it, but "of course you don't." If you did, you would change your opinion.
* I think the majority of people who browse with JS deliberately turned off are misinformed*
Even if so, they are the same so-called 'paranoid' people to whom a secure (and hopefully anonymous) micropayment platform appeals.
And even if I am confused about that I'm certainly not wrong about the numbers, they're minute.
What is important is not absolute numbers. I reckon that school teachers comprise a minute portion of all web surfers. I doubt that Patrick would use this as a reason to exclude such from his Bingo Card Creator site.
I consider myself to be super-paranoid and would welcome with open arms a proper cryptographically secure internet payment system.
You would think that one could generalize this.