It&#x27;s more that if literally any other site on the internet were found to have any type of CSRF vulnerability, people here would be going on and on and on about how this is web dev 101, only a complete idiot wouldn&#x27;t know about&#x2F;secure against CSRF attacks, etc.<p>Whereas here, when it&#x27;s HN with a CSRF issue, &quot;eh, it would break some third-party clients if we patched this&quot;.