Speaking of minimizing attack surface, I note that this page attempts to load content from 8 different third-party domains, 2 of which are controlled by Google, a major known tracker.

I noticed and appreciate that the SI prefix in "kilobyte" is correctly used to refer to a power of 10.