According to the article it's a static site served from cloudflare. That would be quite the compromise.