zlacker

They didn't say JavaScript has system access, just that it can be used to spy on users (in the browser, and everything seems to be moving to the browser).