A good option are static site generators like Hugo.

What makes WASM more secure than JavaScript? I’d think that the main issue with JS is that it’s a programming language that’s running on the client-side, not that it’s specifically JS.

I do have formal education in the field, but that doesn’t mean that I’m easily capable of e.g. writing a module for Nginx or even most website frameworks or knowledgable enough about administration to feel comfortable exposing a dynamic website (as opposed to static HTML+CSS) to the internet.

A lot of it is learning by doing, though, and for a lot of things books are a great resource (some stuff is outdated as soon as it’s published, but general system administration or programming knowledge doesn’t get outdated that fast).

I’m reading a lot of personal blogs that don’t use JS at all, or at least are still functional with JS blocked. A somewhat surprising amount of websites work without it.

The issue with JS is that while I assume that your use of JS is relatively minimal and you’re not malicious, I don’t know that, and even if you’re not actively malicious, your site might still be compromized by exploited JS vulnerabilities, site hacks or uninformed/negligent choices of third party libraries/plugins/CDNs (NPM is notorious for supply chain attacks and lots of otherwise alright sites include font CDNs or even analytics). I’m not super anal about not using any site that doesn’t work without JS, but having it off by default is definitely good practice and sometimes I do decide that I don’t want to see a site that badly.

UBlock’s approach is that you disable it for every site in the settings and then whitelist per site. Seems sensible enough to me. How does noscript do it?

You can block JavaScript with uBlock, BTW!