These US Government websites are giving bad security advice:

https://krebsonsecurity.com/2020/03/us-government-sites-give-bad-security-advice/