I think I got stuck on needing some account to access the API that will tell you the channel name.
Having https://i.ytimg.com in img-src (for thumbnails) and https://www.youtube-nocookie.com in frame-src (for embeds) would be nice :)
Edit: you can use YouTube's oembed endpoint to get channel details for a video, e.g.:
https://www.youtube.com/oembed?url=https%3A%2F%2Fwww.youtube...