If you blanket trust a CDN, doesn't this allow bad actors to still send JS to your browser? Anyone could use that CDN. I found uMatrix easier to use and more

If you blanket trust a CDN, doesn't this allow bad actors to still send JS to your browser? Anyone could use that CDN. I found uMatrix easier to use and more configurable than NoScript.