A quarter of the field’s Web users rely on infrastructure that is inclined to assaults