Having client installed malware detection would be the step after blocking ads. Whitelisting JS would make 90% of the contemporary Internet, including essentials like Gmail and Office365, unusable.
It wouldn’t make Gmail and Office365 unusable because they would be whitelisted. Nothing on the top-20 list you can come up with would be affected because those things you can think of from the top of your head would be things IT would also think of from the top of their head and whitelist it. The long-tail of sites is where the real impact would be in my opinion.
I do this -- I use uMatrix and effectively whitelist js. The net result is that you realise how a) websites work, b) fecking annoying cloudfront and gCaptcha are z and c) Facebook is everywhere.
No way in hell I'd recommend this to anyone who isn't tech aware though.
