I'm sorry, what basis do you have for saying 'your browser has been owned,' as if it were inevitable and I were merely unaware of it? Just because I have JS enabled does not mean I'm indifferent to security. Besides my OS, I also monitor traffic through my router and modem.
Please don't assume that your abundance of caution entitles you to dismiss others as ignorant or indifferent to security matters.