Service workers have been around for a while. As far as I know their capabilities are restricted to the domain that includes them. So the guardian website can only intercept network requests made from itself.
There used to be a declarative version AppCache, but in pracrice that made cache invalidation almost impossible to manage properly.