User blog comment:Kirkburn/Technical Update: September 2, 2015/@comment-13301-20150904094840/@comment-13301-20150904161949

So basically any existing malicious script is still able to steal credentials on the Oasis skin (because of the login form all over the place), you only prevent new scripts from being added...

Anyway, I still have to see Wikia apologize for the irresponsibility of their design decisions, and not just ban every user script, like if suddenly all users are harming others and hacking their accounts.