as far as i know umatrix is unmaintained. so the default ublock + noscript seems the best combination.
Would you please let me know how do i get the same "all scripts are blocked" and allowlist specific domains only like in noscript? As far as i know ublock enable/disable javascript for whole website not subdomains. I could be wrong. And noscript have xss protection.
Ublock [1] and Noscript [2] are must have. you could also checkout Privacy Badger [3].
If you use arkenfox user.js [4] you could also use I still don't care about cookies [5]
This is a very nice guide with encryption support where you can learn a lot: https://gist.github.com/orhun/02102b3af3acfdaf9a5a2164bea7c3d6 . Please note i'm not the author.
I am not the creator of the video but amazed what it all makes it into the stable branch.