diff --git a/4.1-Extensions.md b/4.1-Extensions.md
index b5d54f4..0afec38 100644
--- a/4.1-Extensions.md
+++ b/4.1-Extensions.md
@@ -32,8 +32,8 @@ These are all, where applicable, best configured to `deny-all` and whitelist.
 
 ### :small_orange_diamond: Recommended Legacy Extensions
 
-* :green_heart: [NoScript 5.1.8.3](https://addons.mozilla.org/firefox/addon/noscript/versions/?page=1#version-5.1.8.3) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/noscript/privacy/)</sup>
-   * Yes, there is a FF57+ non-legacy version, but it's not ready for prime time. Use uMatrix in some hardened configuration, but note that this is not a total replacement for NoScript, as NoScript can offer some unique protections; eg: ClearClick, ABE - as of writing these are not yet in the NS10 version)
+* :green_heart: [NoScript 5.1.8.4](https://addons.mozilla.org/firefox/addon/noscript/versions/?page=1#version-5.1.8.4) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/noscript/privacy/)</sup>
+   * Yes, there is a FF57+ non-legacy version. Use uMatrix in some hardened configuration instead. Note that this *may* not be a total replacement, as NoScript *might* offer some unique protections <sup>this is debatable</sup>: eg: ClearClick, ABE <sup>[see here](https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.2.3-uMatrix)</sup>, XSS <sup>really debatable</sup>
 * :green_heart: [Greasemonkey 3.17](https://addons.mozilla.org/firefox/addon/greasemonkey/versions/3.17) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/greasemonkey/privacy/)</sup> | [GitHub](https://github.com/greasemonkey/greasemonkey)
    * Yes, there is a FF57+ non-legacy version, but it is not ready for prime time
 * :purple_heart: [HTTPS by default](https://addons.mozilla.org/firefox/addon/https-by-default/) | [GitHub](https://github.com/Rob--W/https-by-default) | [Extension Info](https://github.com/Rob--W/https-by-default/issues/12) & [1370388](https://bugzilla.mozilla.org/show_bug.cgi?id=1370388)