Assets are served over HTTPS with long-lived caching. Versioned paths look like /assets/app.3f9c2a.js.
Cache-Control: public, max-age=31536000, immutable for versioned files; HTML is not cached.
Hotlinking from third-party sites is not supported.