In reply to David Anderson.

I still think it's an odd thing for CodeGuard to ask, since it's not what they do, but they must have a reason.

To be honest, I don't consider self-hosted WordPress to be a good platform "for the masses", given what I've seen of sites people have built for themselves (or even paid someone else to build in many cases). I think the right level of knowledge for building and maintaining a secure, successful site with self-hosted WordPress includes knowing how to work "further up the stack". On the other hand, Editor level maintenance by the owner of a professionally built site is entirely reasonable.