Why it matters
A page opened with target="_blank" can reach back to the page that opened it and send it elsewhere. Current browsers assume noopener, but older ones and some in-app browsers do not, and saying it costs nothing.
How to fix it
Add rel="noopener" (or noreferrer) to every link with target="_blank".