Well, that's a little unnerving. Why can't all hackers just join in on the endless parade of clumsy brute force bot attacks on /wp-admin? What are your recommendations for reads for newbies or non-techies, so that they can familiarize themselves with potential security risks, and how to evaluate them?