DAOs nearly always have their front-end in a public repository so you can run it locally, but this is also convenient for the Cloudfare hijacker. One defence i

DAOs nearly always have their front-end in a public repository so you can run it locally, but this is also convenient for the Cloudfare hijacker. One defence is ENS. If your DAO's contract is registered for example as "BadgerDAO.eth", and your users wallet software shows that every time they make a transaction then it will be a red flag when the contract has been swapped out in the compromised front-end. Unfortunately many wallets don't support ENS, and in those that do the experience could be better. So better wallets are part of the solution.