Great article, but I think it’s missing one aspect. That Experience Cloud isn’t behind a WAF (web application firewall). Now I know its very cheap to to set it up yourself but I have come up against this a couple of times. My assumption is that the risk is actually very low and adding a WAF doesn’t really add much because experience cloud is “proprietary” and with the majority of customers using OOTB it becomes less of an issue. But it would be good to understand a little more around the reasons.