Who does this affect? The attacker can always modify the page however they want anyways and the https for the js source would mean the js itself cannot be tampe

Who does this affect? The attacker can always modify the page however they want anyways and the https for the js source would mean the js itself cannot be tampered with Does it help much? No. Should you use it? Yes.