[y3sh]

At a quick glance it seems rather easy for tiktok to slip in whatever it wants in that source from time to time. Is this the status quo for third party cookies?

[marrone12]

Yes. You link to a random 3rd party javascript, which they could change what it loads at any point.