> For example, I wanted to add the Marginalia search engine on the home screen in this manner, but because of its default-src https://*.marginalia.nu policy, this doesn't work.

With any luck, perhaps the owner of marginalia will see this and add a manifest to the page