What happens if a random wordpress blog&#x27;s frontpage (&#x2F;) is compromised and has malware injected, setting the immutable keyword? Cloudflare and letsencrypt means most sites will be https sooner than later, so the https part will be &quot;taken care of&quot;. (At least that&#x27;s better than nothing; imagine the power granted to captive wifi portals if not!)