What about some options to trust the sub-resource integrity of tags from a trusted or allowed domain?
https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity
Curious about people's thoughts on this, also I'm not sure if this is the venue for feature requests... sorry if not.