Based on your answer I investigated further. The reason is that the site customizations are included in the CDN rewrite. They’re urls under /site_customizations/. So if you have a CDN rewrite in place, you’ll need to perform some manual invalidations on site_customizations/*.