Every HTTP request should ideally be preceded by a dialog button and if affirmative consent is not provided, the request shouldn't be made.

For example, I did not consent to this y18.svg file that this website has served to me. This is a non-consensual violation of my computational autonomy. Just to put a logo up? Horrific.