Potential technical aspects: do they have HTTPS? What about DDoS protection? How is the server infrastructure set up?
