> [...] except in certain niches like Lua as an embedded scripting engine, when you really need something that can be trivially sandboxed.

Isn't that exactly the reason JavaScript exists in the first place (i.e.: an embedded scripting engine for browsers) ?