Doesn't the fact that resources send different data mean that SRI(Subresource Integrity) checks cannot be performed? As for fingerprinting, it would not be a problem since it is the same as with Etag.

https://developer.mozilla.org/en-US/docs/Web/Security/Subres...