Specifically preload or HSTS? Because HSTS gets you most of the protection you need while being able to recover if something goes horribly wrong. Set your HST

Specifically preload or HSTS? Because HSTS gets you most of the protection you need while being able to recover if something goes horribly wrong. Set your HSTS timeout to greater than the gap between user visits and it does prevent active MitM. You're only unprotected for first time visits being actively intercepted or particularly long gaps where HSTS can expire (both of which are hard targets).