Also weird that only some assets yield a 403, whereas others load. Maybe because the ones which load are still cached by the CDN, but on cache misses the files can't be fetched anymore.