If you know enough to be scared of drive-by injections, it's better to use NoScript than rely on other people always giving warnings. What if the poster (with a

If you know enough to be scared of drive-by injections, it's better to use NoScript than rely on other people always giving warnings. What if the poster (with an account 4 days old) was actively trying to be malicious, and nobody had noticed it yet?