You could also use a subresource integrity check if you are worried about the security but still want to use Google's hosted version.