I'm afraid of the unknown, I guess.

I did notice some weird javascript in an email virus attachment the other day. It used a bunch of escaped (hex?) values and other obfuscation techniques. Point being, it didn't look like anything you'd want to run with an accidental double-click.

Being that I run winders on the desktop, running Opera with JS off gives me a (possibly false) sense of security.