Sounds like a good way to separate oneself from a disgusting, greed-driven, and fake environment. Not to mention that for-profit education institutions have zero interest in your skill set—it's your money they want, not your success. I would probably enjoy studying CS in Norway, though.
I could not care less how it “looks”. I never promoted any of my work, regardless of its field, quality or scale—my OCD tells me that good work needs no promotion. But some people started to tell me that this approach might not be very healthy, especially in modern days with the amount of trash being generated every millisecond. So I started to _share_ it with other humans.
> I found that if you scan your site for CSP headers, none of them shows up
Some scanners ignore them in the meta tag, looking only at HTTP headers (just like some browsers). I thought Netlify would merge meta CSP into an HTTP header, but it seems like this is not the case.
Not sure where Zola can fit dynamic CSP mechanics, but there might be a solution one day: https://www.netlify.com/blog/general-availability-content-se.... I might have figured out how to deploy Cactus with a strict CSP. It can't find the room tho, even when I deploy following the official guide, so this looks like something on their end (waiting for confirmation). It's on the `comments` branch if you want to test my approach https://github.com/charlesrocket/halve-z.