Here’s hoping WordPress continue to close the loop on identified vulnerabilities by continuing to improve documents (Theme Handbook, Plugin Handbook, Code Standards, etc) and tools (wp-coding-standards/wpcs, @wordpress/eslint-plugin, etc).
If best security practices are in the WP documents and tools, the uptake will be substantial.
[easy to say, but non-trivial to deliver]