Right, but what I'm saying is that you don't need the loader. Just have a bookmarklet with html that contains script tags with SRI. The loader is just another step you need to trust.
data:text/html,<script crossorigin="anonymous" integrity="..." src="...">