PureOS should include Mozilla addon LibreJS and install it by default, to block execution of nonfree Javascript.
Debian tracks creation of package xul-ext-librejs at bug#659348.
When that is done, that package should be included in the default set in calamares and debian-installer.