Dear @ECISVEEP , after the Aland mass-deletion attempt came up, I ran a security review of your VHA app and voters portal at voters eci gov in. The Mozilla Observatory score was 15/100 (F). A big whooping F The Content-Security-Policy header is invalid. CSP is effectively disabled. There is no HSTS. Session cookies lack SameSite. Your apps render the portal inside WebViews. That amplifies every server-side flaw and makes attacks practical. As sensitive as a service like voter enrolment and delet