I would rather say we should be not so much impressed with pagefair.

Running stuff on an externally managed CDN without 2FA is simply stupid and dangerous. And even more as they are a third party script used by dozens of news papers.