Theres been quite a few discussions about that loaded file (New in v4) recently. At this time it looks like it is required by the product and needed for Membership features. Maybe in a future release there will be the ability to inline it yourself instead of using a CDN. Or disable it if Members is disabled.
You can’t remove the ghost_head partial, because there goes your SEO/meta tags. You could probably build a CSP rule to block unpkg, but thats overkill.