While I'm not a security expert, seeing the various ways that someone can steal info from a site even after all the protections GitHub put into place was fascin

While I'm not a security expert, seeing the various ways that someone can steal info from a site even after all the protections GitHub put into place was fascinating, and does bring back the old concern: if a site as large and respected as GitHub has to do all this work and still encounters exploits, what can an average person do who might run ad scripts, a tracking script, and a few helper scripts from various sites? And how can tools try to put in more protections for average folks (cough, wordpress)? If you liked this, btw, worth reading some content from their pentester https://cure53.de/ https://cure53.de/ which also had some interesting findings and links.