I can't recommend enough limiting JS to an allowlist.

By default, I browse without JS. If I get to a website that I want to explore that requires JS, I turn it on with one click:

https://github.com/maximelebreton/quick-javascript-switcher

NoScript is the standard for this, with uBlock Origin being something like its 'spiritual successor'.

I run both side-by-side.

https://github.com/hackademix/noscript

https://github.com/gorhill/uBlock