I came in swinging to tear apart yet another oblivious security article, but you actually taught me something.

Looking up X-Frame-Options and X-Content-Security-Policy now--thanks!