Near the end of the post, the author suggest using SRI to prevent the compromised CDN problem. However, that only works for linking to static files (eg. a specific version of a JS library).

More info on SRI: https://developer.mozilla.org/en-US/docs/Web/Security/Subres...