Correct, and notify the user the site is infected with a trojan with a scary warning screen. That second part being the bigger issue.
The JS being blocked isn't the issue, the fact I have users contacting me claiming the site was hacked was the big issue.
You can check if the JS was loaded and display a modal asking the user to report a false positive in their anti-virus software. It's similar to what websites already do with adblocks.
Do you understand what a customer service nightmare customers asking if their phones got hacked by your website is?