Agreed. We offer a public API with no access, so there is limited risk and, in addition, we do not use cookies. There are some dangers, but it's really limite

Agreed. We offer a public API with no access, so there is limited risk and, in addition, we do not use cookies. There are some dangers, but it's really limited in this context! An attacker can just as easily perform the same attacks with free webhosting on any of the thousands of free webhosts!