True, but when I say "3rd party code" I was specifically referring to code coming from a 3rd party server and therefore not under the control of the 1st party.

True, but when I say "3rd party code" I was specifically referring to code coming from a 3rd party server and therefore not under the control of the 1st party. If the site I visit hosts the code then I trust it because I trust the 1st party (not saying that's necessarily a good idea, but it's my current philosophy). I have uBlock Origin set to block any 3rd party requests, so I do have to explicitly "invite" any such code/resources. And you can tell uBlock to remember those invites. This feature has made the web bearable again.