Wow props to System76 for coming clean about this despite the fear of a huge public shaming/backlash from a disclosure like this. Although they took a decision of switching from SSR to SSG as a result, they shouldn’t think that really fixes vulnerabilities in the future. I believe SSG is overall the ‘less secure’ of the two, but no tech stack is perfect and its mostly a matter of use case and performance, not security that should be the decisive factor. At least it wasn’t another Wordpress or PHP breach.