I studied this issue, because I came across information that only scammers use java script. In fact, it turned out that these are not related in any way. You can be deceived using java script or not using java script. At the same time, I recently made an order for the first time and was not deceived, and it turned out to be the C*****P website. Draw your own conclusions.
As for user safety, I'm not sure... It seems to me that it is only unsafe if the site itself is an intruder, or I may be wrong.