In reply to Paul F Gilzow.
I appreciate the concern you are airing but I don’t see a clean solution to this. Once you start pulling at the thread, the whole of computing unravels.

At the moment you have to give 30% of your profits to the gatekeepers of mobile app stores which covers, in part, them taking responsibility. Not all of it is cut and dry though and once a regulatory body is in between the users and the developers a lot of it comes down to opinion.

Plus it’s at every level that this could be compromised. Web hosts in the past have done things that inject unwanted adverts or created security holes. Your web developer could be doing unsavoury stuff. The WordPress themes and plugins could be doing it. The libraries that they depend on could be doing it. A hacker could break in and do it.

There is no guarantee of safety with this stuff.

At the end of the day I think you are right that this does happen but as a % of the total things that are happening it is small and pushing everything through some single gatekeepers doesn’t seem like the way forward to me.

This is a suitably rare occurrence that it is headlines everywhere at the moment.

What you can do though is follow best practices, like having backups and security plugins. It’s insurance for your site.

Also, we have laws against this type of stuff which will do what it can to deter most and punish the rest.

I think if you want real safety go sign up for WordPress.com, Wix or Squarespace.

There is a certain amount of risk in the real world.