Drupal Core

<?php
namespace Drupal\article_stats\Service;

use Drupal\Core\Entity\EntityTypeManagerInterface;

final class ArticleStatsService {
  public function __construct(
    private readonly EntityTypeManagerInterface $entityTypeManager,
  ) {}

  public function getPublishedCount(string $bundle): int {
    return (int) $this->entityTypeManager
      ->getStorage('node')
      ->getQuery()
      ->accessCheck(TRUE)
      ->condition('type', $bundle)
      ->condition('status', 1)
      ->count()
      ->execute();
  }
}

<?php
#[Block(
  id: 'article_stats_block',
  label: new TranslatableMarkup('Article Stats'),
  category: new TranslatableMarkup('Custom'),
)]
class ArticleStatsBlock extends BlockBase implements ContainerFactoryPluginInterface {
  public function __construct(
    array $configuration, $plugin_id, $plugin_definition,
    private readonly ArticleStatsService $statsService,
  ) { parent::__construct($configuration, $plugin_id, $plugin_definition); }

  public static function create(ContainerInterface $c, ...$args): static {
    return new static(...$args, $c->get('article_stats.service'));
  }

  public function build(): array {
    return [
      '#markup' => $this->t('Articles publiés : @n', ['@n' => $this->statsService->getPublishedCount('article')]),
      '#cache'  => ['tags' => ['node_list:article']],
    ];
  }
}

<?php
class SecurityHeadersSubscriber implements EventSubscriberInterface {
  public static function getSubscribedEvents(): array {
    return [KernelEvents::RESPONSE => ['addSecurityHeaders', 10]];
  }

  public function addSecurityHeaders(ResponseEvent $event): void {
    $response = $event->getResponse();
    if (!str_contains($response->headers->get('Content-Type', ''), 'text/html')) return;
    $response->headers->set('X-Frame-Options', 'SAMEORIGIN');
    $response->headers->set('X-Content-Type-Options', 'nosniff');
    $response->headers->set('X-Drupal-Cache-Tags', implode(' ', $response->getCacheableMetadata()->getCacheTags()));
  }
}