As a counterpoint: I use Request Policy and love it. For those who don't know, Request Policy (RP) simply blocks requests outside the website's domain. I confi

As a counterpoint: I use Request Policy and love it. For those who don't know, Request Policy (RP) simply blocks requests outside the website's domain. I configured mine to deny all requests unless I whitelist them (by hostname). It eliminates most security issues; Ghostery rarely has to block any trackers, for example. I would never recommend it for a typical end-user; it requires too much understanding (e.g, to understand enough about CDNs to identify which hosts need to be whitelisted). For most people reading this, it would be no problem. It comes with large, pre-configured whitelists that cover many common websites. Many sites work fine without anything whitelisted, though most need at least one host for their CSS. More complex sites, such as those running applications, can take some effort to get running. Once you figure out a site, RP remembers the whitelist and the site works indefinitely. The interface needs work but it's functional. There is a beta of a new version, which is supposed to fix some interface issues, but I haven't tried it.