The site now includes some foreign scripts and we need a more lax CSP in order for that to even work.
