Locked down profile picture uploads with size/type limits, added rate limiting on login/registration. Built a real-time group chat from scratch with Socket.IO including image uploads compressed on the fly with sharp