See https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity That should prevent hypothetical highjack of CDNs.