Re: The fact that...
"Nope, because a MITM that can masqerade as the source will also happily alter the LOCAL copies,"
Unless he's got acces to every web server or he's a man in the middle on every single router on the internet thats unlikely to happen. With one point of origin for a javascript API he only has to hack into 1 system.