4 ms·

For every one of these websites, there are probably 10,000 that don't do any CSRF checking at all.