I’ll publish the second part (Caching Liveviews - Part 2: Publicly caching private Liveviews) this week.
I tried earlier this year but the PR was unclear and not great TBH. It’d be nice if some devs with security expertise could confirm the hypothesis I’ve made in the post (that is, you can safely rely on origin only). I’ll open the PR this month anyway and keep the community informed in this post 
