Host the logo ourselves (we should have never hotlinked mediacrush in the first place), remove inline styles & JS. Add CSP headers everywhere