Too bad it seems to be the case. We are in the era that everything needs to be done via extensions!
I think disabling JS globally and selectively allowing only the script needed for functionality is the most important thing you can do as a security measure while skateboarding the web and NoScript the extension I want to be able to use.
Some sites have a long list of scripts that would like to run and I've heard people say it's too much trouble to do that for every site. I can look at a list and tell by the name which ones are needed and they are usually far less than those listed..
From
their site:
NoScript's unique whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known, such as Meltdown or Spectre, and even not known yet!) with no loss of functionality...
Need I say More?
How about Drive-by downloads? I know where your Windows box will download the Malware payload as soon as you land on the site unless you have that script disabled. You don't need to do anything on your part for it to happen and probably won't even notice till it's at work.
But I wouldn't send you there to find out the hard way. I could dig up posts where people talked about it happening to them. Didn't worry me one bit or keep me from going there every day. Now all it's good for is the drive-by and not what it used to be.
I've used Firefox since it was released and don't like what it's become but will use it till it no longer supports the extensions I want. Then it is worthless to me as a browse and time to start looking for one of worth. When that is no longer possible I'll use more "primitive" measures like
www/w3m-img. Or go mid-evil on them and send a spider on it's way to bring the site to me.
I have very few sites now that warrant bookmarking by frequency of visit by choice. There would be even less of import when Security tops the list of importance while I edit the list and balance the scales. This is one of the few I would visit with JS given a will of it's own that exceeds my Permissions because it cannot superseded my will as Taskmaster in the task assigned as my hire. Or "you're fired".
Pale Moon on the other hand only provide you a list of search engines and you choose what you need without using any extensions:
https://addons.palemoon.org/search-plugins/
I choose not to do what I think is needed only because I was asked not to.
That was decision of the person who took the abuse of a Mouthy Moonie that turned the debate brought to them into a poorly scripted tag team match and called his partner Marybeth Moonie in for a turn in what became a handicap match.
A run-in from Parts Unknown by Agent of Chaos#1 was not of their approval and request to open bomb bay doors was denied. So I honor his requests,
I'm an Independent Entity and asking permission to do something not something I do often so I want to keep my word.