I have ran malware on known sites due to faulty ads and some Java 0-day about 5 years ago. I never enabled Java in my browser again. I do wonder if having used NoScript would of saved me since it does block Java applets too.