I can't recommend enough limiting JS to an allowlist.
By default, I browse without JS. If I get to a website that I want to explore that requires JS, I turn it on with one click:
By default, I browse without JS. If I get to a website that I want to explore that requires JS, I turn it on with one click:
I run both side-by-side.