A modulepreloaded parser-inserted external module script is allowed with `strict-dynamic` in the script-src directive.