SVGO has a option to drop script tags, thought it's not enabled by default.

Browsers will ignore scripts if you load the SVG in a img element.