Exactly. And I don't even think the separation would be hard on a technical level. I spend a lot of time on websites where I rely on JavaScript (Google Maps, n

Exactly. And I don't even think the separation would be hard on a technical level. I spend a lot of time on websites where I rely on JavaScript (Google Maps, navigating GitHub etc.), but it's always the same handful of sites. Having a "Trust this Website" button to whitelist these places would totally work. Everyone else can serve me static HTML or lose me as a visitor. (I realize that's kind of what NoScript extensions achieve, but they're not a standard with enough momentum.)