Earlier quoted context omitted.
Why wouldn't (or shouldn't) one be able to make it run standalone?
It's to do with the browser security model and JavaScript restrictions on file:// paths. I'm not entirely sure of the class of attack that it prevents, but it's been that way for quite a while now.
Tada, access to local files, or unlimited XHR requests for DDoSing, etc. :-)