I mean you might as well just disable all connectivity on your computer if you only feel safe by not having CVEs show up in a search. Generally people want to still receive content though and are looking for the safest ways to do that, not ways to re-enact Bubble Boy, and for that browsers actually rank pretty good against most any other ways to get dynamic content.

The question wasn't "what is the safest way to display dynamic content", the question was "is displaying dynamic content (this way) safe".

And the answer is no. Web browsers are the safest way to run arbitrary code in a sandbox on your computer - which is what dynamic content in this context really means - the same way that aiming at your feet is the safest way to shoot yourself.

I’ve run NoScript for years. I selectively enable JS. It’s fine.

You'll be safe because you can't effectively use the modern internet :)

Dissenters and dissidents stick together; you have my vote.