@noj, Re: Note to Adobe.
While I can't comment on how effective the following might be for other browsers, I can attest that it's done wonders for IE11 on Win7Pro64. That said, the same tactics *should* work in other browsers as well, but I make no claims to how well it will work (if at all).
Under the browser options, security, and select the internet zone.
Go through the entire option tree disabling all the scripting, activex, java, java scripting, etc, & setting them all to disabled (not merely to be prompted before running, but entirely disabled).
When you get to the misc section at the end, disable the ability to load anything from anywhere other than the original domain, meaning no third party content will be displayed.
Last but not least, turn the cookies policy to prompt for first party cookies, auto reject all third party cookies, to block location requests, and then save the settings.
Reboot the browser, clear the cache, temp files, cookies, & go visit a site you like. If it asks for a first party cookie *and you have to log in to the site for normal use* (like a bank, a comment forum, etc) then accept it & log in as usual, otherwise block the cookie. If you check that "remember my choice & don't ask me again for this domain" box, then that's one cookie you'll want to keep. All the third party tracking cookies will never get set, all the third party content never gets loaded, and all the scripts get a feisty "Fuck You!" from a browser that refuses to even make the fetch request. If you visit a site, disable the cookie permanently, and it decides to not play nice, consider that reason enough to find another source for the content. Places like news sites will be scraped by the search engine of your choice, a plain text/text only cache of it thus available, & the content retrieved without having to play the "Is the code they're feeding me secure or will it trash my system?" whack-a-mole game.
There are some sites that I *need* to visit that do *NOT* like this set up, so for those I add them to the "trusted" zone instead where the permissions are less restrictive. But they *STILL* get gone over with a fine toothed comb to determine what aspects have to be enabled for the site to function, and a site-specific set of permissions generated JUST for that site. It's a pain in the keister, but it stops the crap from getting in & that's a huge sigh of relief.
TL;DR: change your browser settings & permissions to stop all the scripts, disallow everything but first party cookies, & never load third party content. That stops random scripts from running, stops the tracker cookies from being set, & stops some douchebag WebDev from loading content hosted from a shady server they have no control over.
Hope that helps.