News orgs of a sufficient size should hire security professionals to mitigate this risk for their readers, not pass off the burden to their customers. News is valuable when it reduces friction between the curious reader and the story.
Any given URL is more likely to be visited when it’s linked by a major news org.
You’re right. In my prior posts, I’d said “outlets” and “The Guardian” and later “publications” and “news orgs.” Krebs aside, most Journo’s aren’t up to, and shouldn’t be, tasked with this. I got lazy in the back-forth.