It also has an invalid website certificate. Kind of a shame that it's so neglected, but it's a pretty good example of what happens to sites when they're allowed to sit for too long.
I was under the impression it was recently updated for the 25th anniversary. However, I can understand not adding "security" in the name of preservation. Real shame.
The nice thing is that most of the security measures -- aside from Subresource Integrity -- can be done without changing any of the actual content.