XF uses document.write if you specify loading jQuery from a remote source.
Loading jQuery from a remote source is generally not useful anymore so you could load it locally instead.
I‘m not sure about it being used in Froala, I would have to check, but this warning will only show on the page where it is used. So if you’re running Lighthouse on your forum list (which doesn’t use Froala) and it is appearing then it is likely output by us for the reason I mentioned previously.