Comment by def_true_false

There is no magic in JS that makes something insecure simply by using JS. Unverifiable? If it's not minified you could literally just right click and read it before typing in your secret.

Similarly, there is no magic dust in a live CD that makes you immune to security issues when running it.