Yes. You link to a random 3rd party javascript, which they could change what it loads at any point.