Flow and CSP
Update: Part of the ideas described in this post have since been implemented as part of Vaadin Flow. See the documentation page about CSP for more details.
==================
My standard answer related to mixing Vaadin Flow and CSP has been that it's not feasible because of architectural limitations. I was wrong. The architecture just needs a little bending, and suddenly CSP without unsafe-eval
can be used with Flow.