I think that would need to be a designed attack, not something that would apply to 99% of websites. The only legitimate resource (that could be used as a canar

I think that would need to be a designed attack, not something that would apply to 99% of websites. The only legitimate resource (that could be used as a canary) being loaded far down a page would be an image (and that kind of requires it to be lazy loading as well).