The static sites attack surface is so small that it is zero :) You get everything anyway, and nothing you do is used by the server. Of course the server itsel

The static sites attack surface is so small that it is zero :) You get everything anyway, and nothing you do is used by the server. Of course the server itself can be attacked, though it is much more difficult then with dynamic sites.