Still no built-in uBlock Origin (or equivalent in-house implementation compatible with uBlock-style lists) in a browser by a company that claims to care about privacy.
No, in 2022 a browser without uBlock Origin or equivalent enabled by default should be considered defective and a security vulnerability.
(not to mention that running untrusted code could expose you to browser exploits so running untrusted code for no benefit is a liability when there are permissively-licensed tools such as uBlock and its filter lists to detect & block them)
uBlock Origin uses Adblock-style lists maintained by the community to determine what to block, and "what" can include scripts, CSS selectors or entire URLs regardless of how they're requested (even <img/> pixel tags can be blocked, and similarly you can load malicious JS but "defang" it by blocking the endpoints it uses to phone home so other JS on the page that expects the malicious JS to be there will still work).
I suggest you install uBlock Origin - whether you keep NoScript is up to you; it may provide greater protection (or simply performance by not running scripts you don't need) if you're happy with the management overhead of manually choosing which scripts to execute.