@lanodan
Server-side software isn’t the software you run so it is irrelevant, you cannot audit the server-side software, period. Accessing a site is akin to using proprietary software. There’s no ifs or buts, it is outside of your control. However, JavaScript runs directly on your computer so it’s akin to running proprietary spyware with a universal backdoor so get rid of it.
If you can self-host or use offline libre software, do it. It is the only way to guarantee software freedom, there’s no other option unless you make your connection absolutely secure and anonymous as much as you can.
@Suiseiseki