Id question the script blocking. Given how functional sites are with no-script I dont think it is the best idea. I also dont think icognito mode is useful and Flash is required on some sites. Personally I self-destruct cookies, ad-block, use a VPN and a disposable VM. Facebook is doing nothing surprising or novel. They are trying to build a personal profile of users to sell to advertisers. The more invasive they get the higher the value of the information.