While I understand and admire the efforts to optimize performance, I think if 1kb spent wisely could be worth it.

Based on the pingdom stats from 2018, the average page size was above 2Mb. See https://www.pingdom.com/blog/webpages-are-getting-larger-eve...

So in the grand scheme of things, it could be a sub percentage price for better security. I do see how even small numbers compound for large populations, but this one is fine IMO