I do think it's fair to criticize WordPress for its design being such that themes are inherent security vulnerabilities. Not that I don't see the trade-offs. T

I do think it's fair to criticize WordPress for its design being such that themes are inherent security vulnerabilities. Not that I don't see the trade-offs. They chose flexibility and ease-of-implementation early on, and are somewhat stuck with the security issue because of the huge theme ecosystem.