Comment by acdha

> Lots of government websites are vulnerable early on.

What data are you basing this on? Federal websites have an approval process which includes a security review so I’d expect some familiarity with that in your response.