Because it could lead to CDN cache evaluation issues.
In addition, the currently hardcoded version is not aligned with the version which is suggested to be downloaded and copied to libraries folder - besides, nothing prevents anybody to install a newer/different version of the library.
https://git.drupalcode.org/project/friendlycaptcha/-/blob/1.1.4/friendly...
vs.
https://git.drupalcode.org/project/friendlycaptcha/-/blob/1.1.4/README.m...
Active
1.0
Code
I would even go a step further and remove that CDN or external library entirely. Since we have a
Drupal fork of that library →
we can just add a dependency on drupal/friendly_captcha_challenge to the composer.json of this project and no manual action is ever be required anymore.
That's actually what Drupal CMS uses as well.