They just pay lip service to security.See the thing is - it is not too difficult to code a browser to go OK from now on there is no such thing as javascript till I see a valid unlock tag, so even if there is a browser parsing bug and a hacker manages to insert javascript via a stupid browser bug (that the website filters naturally do not and cannot cater for) it does NOT matter - since javascript