Since you mentioned Ublock-Origin. I would recommend to disable 3rd party Iframes. That will mean tweets, youtube videos will not play by default but you can manually whitelist them at global or site local way if desired. Not loading Iframes by default should reduce the amount of trackers and potential malware that could be loaded from compromised sites.

You can see what level of blocking you can use according to your convenience here: github.com/gorhill/uBlock/wiki/Blocking-mode