Is "Enforce Content Security Policy for External Career Sites" a mandatory feature in 26C?

Summary:
During 26A and 26B releases, Oracle informed Content security policies will become mandatory starting with the 26C release. But there is no information about this in 26C release notes. Can any one confirm if this is still a mandatory feature in 26C release?

Screenshot from 26A release notes:

Screenshot from 26B release notes:

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

26C in Non-Prod environments and 26B in Production

Code Snippet (add any code snippets that support your topic, if applicable):