...and when your site is hacked, will it have been worth it?

"Some random WordPress plugin" is usually the main entry point. The core has a bad track record, but plugins are worse by far.

▲

antisthenes 4 hours ago | parent [-]

So what if it's hacked? Those people's data has probably already been leaked multiple times via huge breaches in Fortune 500 companies and government websites.

You just patch and redeploy.

	▲	askonomm 2 hours ago \| parent [-]
		So what if this person gets mugged? They've probably been mugged multiple times before already! Thus, any future mugging is also totally fine!