Having used uMatrix for years now, I can't imagine browsing without it.
A couple of tips for your ruleset:
* disable first-party plugins (flash, PDF)
* enable first-party "other" (html5 video, audio)
I also enable various CDNs globally, i.e. scripts from cloudflare cdnjs, and frames/video from youtube and vimeo. Though I don't really recommend this if security/privacy is a concern. At least they won't get your cookies :)
Edit: oops, just noticed you accept first-party everything. Still, disabling plugins should prevent a wide class of exploits (see recent Chrome PDF vulnerability).