That’s not necessarily special to JS. It’s special to client-side code. A mobile app writing in swift could do this. A cli tool written in any language could do this.

This isn’t an argument against JS, it’s an argument against misuse of client hardware.