Publish a package or import UserCSS. Userscripts are a translate path, not a drop-in runtime.
Default path. Sanitise still applies. External URLs, imports, overlays, and update sources are disclosed or rejected.