Google now requires all users to run nonfree JS code in order to log in.

It says this is for "security" — security against entities other than Google. However, running Javascript code controlled by Google's web site, or by any other web site, makes you vulnerable. If the Javascript code carries a free license then we are legally allowed to maintain our own modified versions to use instead.