I know the author of firejail is very dedicated to writing good code and he
makes sure to upload the patches very soon, so hopefully it is reliable
(well, in any case it won't hurt your sec if u use it..)
Yes, javascript is terrible stuff. I just wanted to remind you that noscript
is not only a script blocker: ABE protection against CSRF and
internet-to-intranet attacks, XSS, Clickjacking.
https://noscript.net/faq
In fact I install even on my friends' laptops for the above reasons when they
ask me to help them with some issue (purging malware or OS re-installation
mainly). I know they would got mad if I did not check the square "allow
scripts globally", which I do, and then I open the "customize" tab and hide
noscript from their view. They don't even know it's there and still get some
important protection.. :)