1. 7
  1.  

  2. 7

    Crazy hypothesis: the problem is not sites that fail to send all 12 (!!!) security headers, but the fact that twelve such headers were apparently needed.