It has indeed been an adventure. Security for WordPress is pretty essential, and a CSP (Content Security Policy) seemed like an easy win, but there was a bit more to it than I expected. While highly rated plugins are probably the safer way to go, I hope this helps anyone interested in learning more about CSPs, and how you can roll your own for your WordPress website.
