And if you like a site you can enable it.
Go ahead, call me crazy like most people do.
Rough config for surf: https://gist.github.com/jakeogh/b23aac080c5c74310c88
Security/privacy doesn't have to be all-or-nothing.
The Internet Explorer security model has 4 levels (Internet, Local Intranet, Trusted Sites, Restricted Sites) and you can choose a preset security settings package, or build your own, for each level.
Maybe Chrome/FF/Safari need something more similar to that, where we can specify different groups or levels, and then assign those to websites we visit.
The biggest problem with the IE method is that the UI is more tedious to add a site to a zone in IE11, than to add a site to the JS whitelist on Mobile Chrome.