You probably can do it with a browser extension with a set of pre-registered hashes for all (or at least vital) components, and segregating verified and non-ver

You probably can do it with a browser extension with a set of pre-registered hashes for all (or at least vital) components, and segregating verified and non-verified scripts to different domains, so non-verified parts aren't allowed to ever touch sensitive data, and not allowing any wrong hashes from verified domains. Maintaining this and ensuring it actually works, let alone upgrading it, would be a nightmare though.