Yes, I've held off suggesting one because this particular site's editors embed stuff from all over the place. But LightHouse said no CSP was what was stopping us getting 100%