ACSC comfortable with enforcing JavaScript on site visitors

A degraded experience for users who switched off JavaScript is one thing; blocking them is quite another.