[brokenmachine]

Isn't it your browser that executes the javascript? Just like the normal web?

From what I remember, ZeroNet ran in whatever browser you used to access it.

[eeZah7Ux]

In the normal web if you browse a well known site there's a degree of trust that the site is not serving malware to you.

That's why is good to use a dedicated device/OS user or at least browser profile to access your bank and doing random browsing.