Or disable pixel readback but there are good reasons you can read pixels back

The configuration of browsers isn't defensive enough, that is the problem. It's also absurd that most popular websites don't work at all nowadays without Javascript.