Wordpress (with auto-updates enabled) + modsecurity with the owasp ruleset = I've never had a problem. I'm sure if someone targeted me specifically that state

Wordpress (with auto-updates enabled) + modsecurity with the owasp ruleset = I've never had a problem. I'm sure if someone targeted me specifically that statement wouldn't be true, but I don't fear having a Wordpress site on the Internet at the moment.