Security rating 135 out of 100 (A+).

After a few modifications to the site styling, I removed unsafe-inline CSS from the site header. I also added Subresource Integrity. The site gets a a score of 135 out of 100 on the HTTP Observatory.

Rating: A+