Hacker News Reader

There's nothing stopping them from adjusting the defaults, but I guess users would criticise them for it.

They could just show users the recommended plugins to install as part of user onboarding .

It is not just about privacy or blocking ads. It is matter of security . I am trust nytimes , I cannot trust every third party whose code nytimes decided to include. Who in turn has included a bunch that nytimes doesn't even know about. How can I trust a website when they themselves do not know what crapware runs?

Their Tracking Protection doesn’t do that? I’d hope at least the Private Browsing protection does.

There is a move toward 1st party proxys as a result of GDPR and similar ruling. Google has already published a framwork or something in that direction. It is not mandatory yet, but when the web moves in that direction there will be no blocking of domains any more. (Technical) Users won't even know that Analytics tracks them.