@randomgeek My website has been plain static HTML with a splash of CSS since 2008. It's even "built" (a bunch of sed regex substitutions) with a shell script. Looks like I may be back in fashion.
@edporras This is why my blog's in Hugo.
Never have to worry about CORS or XSRF attacks when there are no JavaScript callouts on the page.