NoScript and RequestPolicy are best used together (as recommended by the creator of the latter) as they serve different purposes. This, plus a few other add-ons in these areas are my set-up and that works well.
You often have to trade off security for convenience – for me, NoScript is too inconvenient to be worth it, because so many sites silently break when JavaScript is not available.
I sometimes dream of a browser that would just fetch the page content and no extra other resources, showing it like Instapaper. The reality is more complex: images, css, CDN's, dynamic content, ...
RequestPolicy realizes the most important part of that dream: not telling Google, Facebook and a host of obscure tracking companies about every website I visit.
