Not actually that hard to secure a WordPress site, just gotta have some basic competence. The corker is taking away write access to the fs, though keeping themes and plugins current, and keeping to good plugins and themes, helps a lot.