Great article!

What I also hate about this is that there are so many "pentesters" that are blindly copy pasting reports from automated tools that "I'm missing this header and this header and property in cookie". We're getting flooded by this. And it's useless.