As your Question seems to be
"All I wanted to know was if magento can work safely as pure URL based web application, with the classic style of reload each page without any fancy Javascript UI functions."
Short answer: No its not possible.
Long answer: Yes, but you have to know a lot
and you need to build a theme which works without javascript (I explain this in more details a bit below)
also its possible, that you need to rebuild some parts of the checkout, which relays heavy on javascript.
So, what is Magento using the javascript for:
Design
Magento was build to support browsers back to IE6,
for having more choices with css, like styling .first and .last elements,
is uses javascript to fill some css classes into the finished html.
Validation
As you noted above, js validation should not part of the security,
as you can workaround it. Thats why magento still validates on server side.
But: Javascript validation gives nicer error messages and reduces the
http requests made, as people send mostly no wrong data as javascript validation
prevents this. It makes the whole usage flow more fluent.
Product Pages
Main Point here, is the price block.
If you change options, this should reflect on the price block, to make it more
easy for customers to see price changes.
If you want this without javascript, you would need to create a big list with
all possible option combinations and their prices.
MSRP - Manufacturer’s Suggested Retail Price
Never used this, but there is some option,
to show this price only when you click on something.
Address fields
You chose your region depending on the selected Country.
This could be very ugly without javascript. Think about it.
The whole Admin area
but as you only removed it for frontend, this is no point here.
But yeah, I dont think the admin area is possible to get working without javascript.
Way to many architectual decisions which depend on Javascript here.
Checkout
Yeah, Checkout is mostly javascript. Biggest part is the former mentioned Address fields.
Iam not sure, with a lot of template work the rest should be possible without javascript
Payment methods
except them. Every payment method of an external service (paypal, Credit Card, Google, Amazone) depends on javascript.
Summary:
Every javascript functionality depends on a base framework,
so they dont need to rebuild 60% from scratch for every usecase.
Because of this, you will have no real gain, if you deactivate the framework
on the base, and selectively activate it, where you still use js.
Also there is no really downside to use javascript, only very few people
have javascript deactivated. Most people today are more selective
and use extra extensions to deactivate advertisements and tracking scripts.