No cross site scripts so they have that going for them. Better then 99% of the web already.