You can have off-by-default with an allowlist. After the initial period most of your sites that need JS will be on the list.