The NuGet and the CDN versions are different. They have the same file version: /* Version: 16.0.6807.1000 /, but the CDN includes / Update: 2 */ in the header, and there are some changes in the code itself.
Using the NuGet version, we receive "Permission Denied" when loading outlook-win32-16.01.js file in Outlook desktop. The file calls invokeHostMethod which itself calls window.external.Execute and that's when the exception is thrown. Office JS stops loading and the add-in does not work.