Third party CSS is not safe

A few days ago there was a lot of chatter about a 'keylogger' built in CSS, but the real problem is thinking that third party content is 'safe'.