True (on both counts). And yet it's common practice to include libs, fonts, and other bits from third party sites that the dev has no control over