People can turn off javascript in their browsers but it's a very small percentage of people. I'm not saying like 3%, it's like 0.0003% maybe that.
One thing about having using javascript is you can't rely on it as it can be changed so the server has to also have security in it to stop someone from doing something they are not allowed to do. JavaScript is just a view part of it and can build a very rich UI.
One small percentage as you say, is disabled javascript. I have for instance, seen that often in browsers used in computers in banking sector.
Another percentage are old browser versions, that Sencha does not support.
And another percentage is hardware that is not fast enough, to make a adequate javascript-based user-experience. Is guess this is more true for Sencha Touch (mobile-phones) than for ExtJs.
You are correct about the need for server-side validation.
I'm sure banks aren't wanting their employees to be doing non bank things on their computers
About the older browsers, that's going to also be a very small percentage but if your projected users will be for some reason, you may need to have a very simplified version of your app but you can use a JS framework for the vast majority that will have a more modern browser.
Hardware, for mobile there are things you can do to protect yourself from devices that are older. The good thing about mobile devices is people seem to upgrade much more frequently than they do an actual computer.
Things like if a component isn't viewable on screen, it shouldn't be rendered. You can do this by removing the component from a container but not destroying it. Then when it is to be made visible add it back to the container and it will be rendered again.