Sure, NoScript makes the danger less significant, but it's still not as good as NoScript+updates. Security bugs in media decoders are fairly common, so there are still plenty of opportunities for danger if your browser is old enough.

But since browser JavaScript engines are some of the best sandboxes in existence due to being constantly tested and updated, not using NoScript really isn't dangerous. Sure, disabling JS reduces the amount of risk, but that amount is already low enough to be tolerable for most people.