If you were cloudflare how hard would it be to patch javascript libraries in transit across your network? Would the cryptographic hashes the end user does on the library before running catch any modifications?