I answered elsewhere. I completely agree on CSP; which is essentially saying: "Oh shit, we fucked up, but lets leave the default as horrible because ¯\_(ツ)_/¯ the nerds that care about this will think they have a solution."