@openstreetmap Shouldn't you be able to prevent loading of assets on unauthorized domains?