In the most recent upgrade a CDN reference was added to include Pendo.io - however there was no sub resource integrity attribute on the script tag meaning that if there was a man in the middle attack or any other compromise of the file then it would continue to load without problem.

With SRI you're creating a hash of that file and telling the browser if the hash doesn't match the resource returned by the host then don't run it

ryanmcdonough.co.uk/.../ 

There appears to be two external references one to Google Fonts and one for Pendo.io - as a minimum these really need to have SRI attributes otherwise we can't have any confidence that the resources running on our instance of HighQ are what they say they are.