Third party CSS is not safe
…because third-party anything really isn’t safe. Jake Archibald:
…If you’re worried about users tricking your site into loading third party resources, you can use CSP as a safety net, to limit where images, scripts and styles can be fetched from.