>Without access to your backend, there's no way for anyone to steal sensitive data or deface your website. No way? At all? Why could they not deface or alter t

>Without access to your backend, there's no way for anyone to steal sensitive data or deface your website. No way? At all? Why could they not deface or alter the static version? Of course there's a lot less attack surface but that doesn't mean it's invulnerable.