I think there’s some vague good reason to block all JS and put sites you trust on an allowlist but I no longer do it personally.