This is scary. Templatic is behind a WAF and still it was hacked? Or perhaps they secured their site with Sucuri WAF only after the hack?