Interesting we asked the same thing. Have a look at Content Security Policy Config
Seems it can’t be turned off?