Firefox lets scripts run by default, hence why there is a noscripts addon.
JavaScript just got exposed
very recently as being vulnerable on all hardware/browsers/operating systems of the last decade or so, so if ever there was a good time to disable scripts, it is now.
Also, malware can get in through ads, so make sure you're blocking ads any and everywhere.