I wonder if a strict CSP employed by individual web sites could prevent it? There really shouldn't be any excuses to not use a CSP rule to allow-list origins fo

I wonder if a strict CSP employed by individual web sites could prevent it? There really shouldn't be any excuses to not use a CSP rule to allow-list origins for fonts, for example.