> I think that the extension architecture should make it easy to declaratively state which URLs an extension will call back to, and then make it up to the browser to transparently update CSP headers to allow those calls.

Adblockers need to play whack-a-mole with this URL list to provide mocks that pretend to be ads to anti-adblock mechanisms, updating that declaration with extension updates every few hours will only lead to frustration.