The nice thing is that most of the security measures -- aside from Subresource Integrity -- can be done without changing any of the actual content.