He recommends using sites that carry a security certificate when possible, and asking service providers whether they have already hardened their sites and applications with tools like blackbox and whitebox testing.
Blackbox have gone to massive effort with this new world, it still feels like a real place but also feels like it was solely built for the board, hell even the security guards skate.