The inconvenience of dysfunctional sites surely outweighs the one in a million chance you will have your login to HackerNews stolen, or something else that's more of a nuisance than an actual danger.
2.) Removes clutter
3.) Additional privacy
4.) Additional security
Not all sites are dysfunctional. And for the ones that are, you enable javascript from the relevant domains the first time you visit. You can choose to remember those preferences for the rest of the session, or permanently.
The small amount of additional work is worth it.
Actually seeing what trackers and other such spyware are embedded in most pages these days is interesting, but I could live without the granular control. I think what I'm most interested in is just really seeing how different pages will break (or degrade gracefully) confronted with the missing functionality of javascript.
If you haven't yet, I suggest you give these add-ons a ride for, say, a week, if anything for the sake of learning.
Because when you hit an infected web site, the script loading from xyz.ru will not get loaded and you will be safe. NOSCRIPT FF & NOTSCRIPT Chrome FTW!
how many of these vulnerabilities would noscript fail to protect against?
https://www.mozilla.org/security/known-vulnerabilities/firef...