Yes, Ghostery's origin story and reconfigure-on-update dance is bothersome. Thanks for the pointer to Disconnect, I will check it out.

Regarding your sites' security, what sort of advice are you looking for? OS-level hardening? Service config?