>have scripting completely off by default

Does this mean you have the "scripts" column red and turn them on for individual sites?

That is what it means, yes. And click them on as needed, first local scripts, and then various external ones if that's not enough. Can be a bit of a hassle for a while, but once you get permanent rulesets established for sites you frequent and more or less trust, it works like a dream. I hardly ever see an ad, and various sniffer-services (or "analytics") must somehow learn to live without a lot my traffic data.

Not parent but probably yes. That's how I roll as well.