"instant.page’s script is hosted serverless with Cloudflare Workers so that there’s no server to hack into."
When I read something like that, I turn into that guy from that XKCD-strip.
I get this overwhelming urge to oldsplain (yes, that's a word) to this whippersnapper that even though it apparently is called "serverless", there still is a machine somewhere, doing something. And that can, of course, theoretically, be hacked.
Maybe someone can youthsplain (also a word) this to me. Thanks in advance, xoxo, YOLO.