In reply to mark k..

Thanks for this. I am not a WP Engine customer. But, if I were, I'd want to see a proper risk assessment, and then an explanation of how and why the measures taken are supposed to address those risks.

Until that's provided, the only thing that WPE's good PR should lead to is the suspension of judgment.