For example, what percentage of sites use Javascript for malicious purposes?
And second, I'm actually surprised the number is not higher. There are a finite number of legitimate sites, which probably slowly expands over time. But the vast majority of sites these days are malicious actors in one or another, and those sites are literally spawning like dividing cells as there is no barrier to spinning new ones up. Whether influence peddling, SEO or hosting crypto miners, there are far more low quality sites than high quality sites, so not surprising to see this.