As much as possible, yes. The alt color schemes are the only thing that needs it, and I have light/dark CSS to fall back on the user's device preference if JS is disabled. Any pages that need a color scheme can be reached with the URL/sitemap alone as well, and any JS-formatted bits will still show something without JS.
pretty sure it just stays on your account, you just can't upload new blacklisted files
Technically I'm not on a VPS or self-hosting. That's a lot more work security and maintenance-wise. I'm on a paid webhost instead that does a good job of setting up the necessary services for me (web server, firewall, etc.) that also gives me a bit of control over the behavior of Apache for my site.
Plus you pay for what you use on my host, which is nice. Cheaper than Neocities supporter for more features if you've got one site (if you make a ton of sites, you may want a host that doesn't charge for resources per site). I'm on NearlyFreeSpeech, for reference.