No need to turn JS off. Turn on Lockdown mode which disables Javascript JIT and WASM, which might be enough