@nilsding preach! I not only deleted all JavaScript from my site, but I added an origin policy explicitly disabling it on behalf of users- just in case some gets leaked/hacked into it 🤣