Sure they can if they'd like to. The public API can either be placed directly in your meta tag, or requested as a GET API via a backend.

What would be the reason for using your own CDN?