Probably old news for most, but annoying websites where the contact email is replaced with
[email protected] seems to still be a thing. As it is, the email is not "protected" in any sensible way, just encoded with a rather trivial encoding. Here's implementations in several languages for how to "unprotect" the addresses.
https://usamaejaz.com/cloudflare-email-decoding/#
infosec #
security-theater
