There are definitely methods of limiting the damage of a front end being taken over. A proper threat modeling process was obviously never performed.