iThemes isn’t known for security, they are known for having a popular security plugin. Those are not the same.

Their security plugin doesn’t stop attacks, despite marketing it that way. And it was less than a year ago that the really poor security of another of their plugins got websites hacked, https://wptavern.com/ithemes-patches-vulnerability-in-backupbuddy-wordfence-tracks-5-million-exploit-attempts. Their security plugin didn’t protect against that since it doesn’t stop attacks, but six other plugins did, including one with only a couple hundred installs versus iThemes Security’s 1+ million installs.