Comment by dannyw

You’re right, but the risk here could be reduced significantly by not loading dozens of third party marketing, analytics, and tracking scripts; one of which was supply chain compromised in this case.

Of course, that goes against commercial interests.