Huh thats interesting about PP, I heard nick say you guys where reviving it which is cool. Yeah don't get me started on wp or cms's man, I think the model is broken. I've had to build a few wp sites here for clients and maintain some others, the security part is awful - for the most part it seems to be plugins from what I can tell using the wpscan gem. I try not to use any and build themes from scratch / write any functionality I need - security by obscurity haha. RIpping out phpmyadmin from the server helps too and disabling passwords, massive point of failure. I've got us using craft CMS for content work here now and I've got a few in keystone too.