My general policy now is to confine important email to a very, very basic website that you rigidly control the hosting over and just keep static sites on.

And avoid using subdomains.