Nice! It seems there are some things I overlooked on the websites I manage — HTTP headers for XSS, HSTS and such, which are going to be easy enough to add.

Kudos to the authors, thank you for helping making the web a better place.