I'm very wary about loading JS from random CDNs. In my opinion, the negative aspects outweigh the benefits by far: - The CDN gets to decide *what* code is de

I'm very wary about loading JS from random CDNs. In my opinion, the negative aspects outweigh the benefits by far: - The CDN gets to decide *what* code is delivered to *which* users. Could be a prime target for, say, another FERRETCANNON. - If the CDN is compromised, so is your site. - If an attacker on a local network manages to inject poisoned cache data into requests for said CDN, your site is compromised. - All of your visitors are disclosed to the CDN owner. - If the CDN goes down, your site does so, too. Note that the inverse doesn't apply: the CDNs superior availability has no positive effect on your site. - Loading from another host may cause an unnecessary DNS lookup and will cause an unnecessary TLS connection.