Indeed, RequestPolicy, AdBlock+ and NoScript are the essential default plugins, both from a security and usability perspective.

But sometimes the content will not load at all, because to show an article's text, the page uses Google's ajax, webfonts, a cdn, and the blog's master site @ wordpress.com or blogger.com etc. In that case, the content has to be really interesting for me to allow all those third-party connections.