If your security slider is set to Safest, JavaScript is disabled so XSS vulnerabilities won't affect you, which makes it safe to disable NoScript's XSS protections.
Here is how to disable this setting:
If you'd like to learn technical details about this issue, check this issue on GitHub.