Comment by sh-cho

> You can argue that plugin security is important, but i have seen dozens of WordPress sites without any problem.

Yes, also there are hundreds of WordPress sites with vulnerability came from plugin.