If the first item isn't "whitelist JS", you're doing it wrong. So many problems arise from letting any site run programs on your computer that it's best to reserve the privilege to the most trusted of sites.
replies(3):
If they are doing meaningful review, I question how much they actually get done in life.
Chrome didn't have anything other than a global JS on/off at first, so they clearly added this feature later.