Wow, watch out for your #themes, people. I thought that with statically-generated self-hosted #Hugo things should be great, right? But no, almost every theme pulled some asset (#fonts, #JavaScript, or #CSS) from a remote server. That's a leak right there.

Now I'm going to have to check my blog and see what #Wordpress is doing. I bet it's even worse..

Yikes. When did it become STANDARD to publish themes that expose visitor data to 3rd parties? @aral small web can be tricky!