Not to be annoying, but I looked at the code for this site and there's a non-SRI using script tag that points to https://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201848 ...