Use uMatrix. Allow all 1st-party except scripts. Allow substackcdn.com's CSS and images. Block everything else. Problem solved.