So what part of the proposed solutions “wouldn’t work”?

Having something is better than nothing! In our case, having connect-src enabled would have avoided the incident.

Not sure what you’re referring to by “custom endpoints” - if you are a normal Datadog RUM user you can only ever send data to one of the several “sites”. There’s nothing customizable.