> This is not helpful, because only an extremely small proportion of Web users run NoScript, and nor should they have to.
Most (non-technical) Web users also don't run their own web servers, so they aren't affected. Among technical users, the proportion with NoScript is probably not as small.