> Using any adblocker is a very clear, positive, action from a user to say "I don't want any additional shit run on my computer".
If there is a simplistic aspect to this issue, this is surely it. If I understand what Mr Helme means, he suggests that when CSP is enabled, the browser must accept what the website developer instructs it to accept, giving the example of an analytics tracker. UBO says it looks like one, smells like one, so it wont step in it. The balance of probability of clientside welfare does seem to rest on UBO's side. Or to put it another way, UBO exists because we have learnt that web services and developers cannot be fully trusted.