Something I still find hilarious is that after a product I worked on started to enforce a content security policy, the #1 blocked source was always for google f

Something I still find hilarious is that after a product I worked on started to enforce a content security policy, the #1 blocked source was always for google font resources. Of course users could whitelist the domains, but many didn't and anyway their sites looked fine.