[doctorpangloss]

Because it JITs Javascript code. That code comes in as data. So it has the power to override W^X.