@Skirmisher i favor "lazy" set-and-forget solutions where any work, if there is any, is upfront. build a good foundation and you can enjoy some level of protection going forward

i don't like (super powerful, amazing, but cumbersome) stuff like scriptblock that breaks sites constantly and requires babysitting. at least, i'm not smart enough to wrangle that into useability