You don't need to disable JS entirely; disabling JS by default from third party origins (i.e. uMatrix) is entirely sufficient to block almost all of these things.