[fiiv]

> The last thing I want to have to do is use Blogsend to send a "Notice of data breach" email! :)

No one wants to have to send any of those emails, least of all me/Blogsend ;)

> One think you could check out is adding security HTTP response headers - your site is pretty clean and simple so it should be relatively easy to get it locked down tightly. See https://securityheaders.com/.

Thanks for the tip! I've added this to my todos!