It's FOSS, and available for AOSP, but doesn't disable CSPs.

CSP unlock saved my life, on LB bad customer deployment, which many css and js disabled on LB, which load pages lazy without rendering page properly