More recently they’ve made it work without JavaScript. I disable JavaScript by default for various reasons (but more about performance than privacy), and I’ve actually stopped enabling JavaScript for Discourse because I prefer its functionality that way.