Quite a few sites these days do break if all scripts are disabled, but for most functionality can be restored by whitelisting just a few key domains (somewhat interestingly, I've found gaming news sites to be some of the most difficult to get to work, since they want to pull content from a massive number of third-party domains). This requires the user be fairly computer-savvy, but generally those using something like NoScript already know what they're doing. In addition to uBlock, I run NoScript, Request Policy, Disconnect, and Ghostery, which prevents pretty much anything that isn't hosted directly from the site's domain from even getting loaded. Aside from sites whose purpose is to serve up malware, nearly all infections come from third-party domains, so shutting those out unless you specifically allow them to load shuts down the primary vector of website-based malware infections.