Well it’s a security shitshow and a fav for hackers looking for an easy exploit vector: just compromise it once and voila! All website consumers are at risk.

Just a shame there’s no liability for negligently causing users to get infected.