Something I still find hilarious is that after a product I worked on started to enforce a content security policy, the #1 blocked source was always for google font resources. Of course users could whitelist the domains, but many didn't and anyway their sites looked fine.
I added these lines to uBlock:
Occasionally some icons break on a few sites, but mostly it's plain sailing.