It’s unfortunate that browsers and standards organisations haven’t done more to promote safer methods of third party integration. The state of the art is still injecting script tags into the document. Given that the web is powered by embeds, ads, and analytics, there should be better sandboxing tools.
Fixed that for you, but I agree with the sentiment: it's a real problem that browser vendors are disincentivized to address.
Sure, you can't break everything tomorrow...
uMatrix is one way to block third-party scripts, but it requires some knowledge to use.
The analytics tag allows for arbitrary logging endpoints to be used, but that solves one very specific use case.
I believe that they’re going to allow worker scripts in the future, but again, that I don’t believe that will solve every case, and will be AMP specific.
> executing ... JavaScript on your website.