The security section of the guide is rather misleading. But it does point to areas where these agencies could help to improve security, instead of trying to paper over real problems that are going under-addressed. We went in to more detail on that at https://www.pluginvulnerabilities.com/2023/08/31/wordpress-for-enterprise-guide-provides-highly-misleading-view-of-wordpress-security/