[rbritton]

Got it. I was leaning that way with my interpretation but wasn't completely positive.

The biggest risk in all of the WordPress ecosystem are third-party plugins. Minimizing the use of those and installing something like Wordfence (free or paid) would go a long way towards mitigating that risk. It wouldn't be non-zero, but it'd be acceptably low.