I haven't really thought about CSRF since building things that are purely static frontend + JS request based. How prevalent are these things in this space? Are

I haven't really thought about CSRF since building things that are purely static frontend + JS request based. How prevalent are these things in this space? Are they still a problem?