Or just via web browser that can show websites and does not run any random script that was send to it.
Something like that would be seen as huge deal when talking about mobile or desktop programs, but somehow when browsers do not show how many MB of additional software they downloaded to build a webpage (that in my opinion should already be build by the server) somehow we all assume there is no software.