Perhaps I'm missing something here, so the browser can check the integrity of the included scripts as such: <script ... integrity="sha384-..."> How will t

Perhaps I'm missing something here, so the browser can check the integrity of the included scripts as such: <script ... integrity="sha384-..."> How will the browser confirm that the source HTML requesting script isn't modified by the CDN? Well known CDN services, such as CloudFlare, are known for modifying the HTML -- This is not uncommon.