(a) doesn't have a Web browser, or
(b) has some way to ensure the code it's running is not from a site where the user wrote all (or even just some) of it