Theoretically we could make the inline styles external as well as the JS, but I'm not clear on what the threat is in the first place.