Security headers on Cloudflare Workers (Observatory vs a USDC audit)

If you ship on Cloudflare Workers, browsers still judge you by HTTP response headers: CSP, HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and friends. Free checks first MDN HTTP O