1. 5
  1.  

  2. 3

    I’d say, for starters, Google Analytics (or any other 3rd party that captures data) should disallow submission from unverified origins.